Attachment 293421 Details for Bug 430829 – audit.log

audit.log

audit.log (text/plain), 2.00 MB, created by Rick Richardson on 2008-01-30 15:56:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rick Richardson

Created: 2008-01-30 15:56:13 UTC

Size: 2.00 MB

patch

obsolete

>type=DAEMON_START msg=audit(1198589893.080:1509): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1819 res=success, auditd pid=1819
>type=CONFIG_CHANGE msg=audit(1198589893.180:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198589893.180:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1198589893.197:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198589893.197:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=MAC_STATUS msg=audit(1198590035.015:9): enforcing=0 old_enforcing=1 auid=4294967295
>type=USER_AVC msg=audit(1198590035.015:10): user pid=1984 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=SYSCALL msg=audit(1198590035.015:9): arch=40000003 syscall=4 success=yes exit=1 a0=3 a1=bf93edd4 a2=1 a3=bf93edd4 items=0 ppid=2806 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setenforce" exe="/usr/sbin/setenforce" subj=system_u:system_r:firstboot_t:s0 key=(null)
>type=USYS_CONFIG msg=audit(1198590135.500:11): user pid=2892 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1198590240.331:12): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198590240.338:13): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198590240.339:14): user pid=2989 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198590240.357:15): login pid=2989 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198590240.377:16): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0 selected-context=unconfined_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198590240.433:17): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198590240.433:18): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198590318.060:19): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198590318.060:20): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198590318.095:21): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1198590349.501:22): user pid=3317 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198590349.573:23): user pid=3254 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198590357.511:24): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198590357.511:25): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198590357.518:26): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198590376.407:27): user pid=3346 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198590376.407:28): user pid=3346 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198590376.414:29): user pid=3346 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1198612032.500:30): user pid=3397 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198612032.564:31): user pid=3322 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198612212.561:32): user pid=3502 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)'
>type=USER_AUTH msg=audit(1198612218.196:33): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1198612218.199:34): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1198612218.209:35): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1198612218.209:36): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1198612320.624:37): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1198612320.625:38): user pid=3505 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1198612861.101:39): user pid=4170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198616462.093:40): user pid=10640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198620061.852:41): user pid=14576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1198621691.271:42): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198621691.272:43): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198621694.761:44): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198621694.765:45): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198621694.883:46): user pid=14660 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198621694.884:47): login pid=14660 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198621694.884:48): user pid=14660 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198621694.886:49): user pid=14664 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198621695.530:50): user pid=14660 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198621695.531:51): user pid=14660 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1198622144.123:52): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198622144.124:53): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198622147.627:54): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198622147.631:55): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198622147.639:56): user pid=14715 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198622147.640:57): login pid=14715 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198622147.640:58): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198622147.641:59): user pid=14719 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1198622147.763:60): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=/dev/pts/4 res=success)'
>type=CRED_DISP msg=audit(1198622264.311:61): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198622264.312:62): user pid=14715 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198623661.322:63): user pid=15469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198624176.178:64): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198624176.181:65): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198624176.223:66): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198624176.224:67): login pid=15530 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198624176.225:68): user pid=15530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198624176.226:69): user pid=15534 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198624218.213:70): user pid=15530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198624218.214:71): user pid=15530 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1198624274.711:72): user pid=15569 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198624274.715:73): user pid=15569 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198624274.752:74): user pid=15569 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198624274.752:75): login pid=15569 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198624274.753:76): user pid=15569 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198624274.755:77): user pid=15573 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198624313.104:78): user pid=15569 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198624313.105:79): user pid=15569 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1198624359.745:80): user pid=15607 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198624359.749:81): user pid=15607 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198624359.758:82): user pid=15607 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198624359.759:83): login pid=15607 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198624359.760:84): user pid=15607 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198624359.762:85): user pid=15611 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198624380.984:86): user pid=15607 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198624380.985:87): user pid=15607 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1198624461.533:88): user pid=15641 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198624461.537:89): user pid=15641 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198624461.544:90): user pid=15641 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198624461.544:91): login pid=15641 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198624461.545:92): user pid=15641 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198624461.546:93): user pid=15645 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198627262.273:94): user pid=15781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198628487.934:95): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1198628488.054:96): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1198628488.730:97): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_ACQ msg=audit(1198628488.806:98): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=SELINUX_ERR msg=audit(1198628524.103:99): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198628524.103:99): arch=40000003 syscall=11 success=yes exit=0 a0=8a63340 a1=8a63358 a2=8a62038 a3=0 items=0 ppid=16306 pid=16307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts5 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1198628561.869:100): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198628561.869:101): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198628562.334:102): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198628571.654:103): user pid=16315 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198628579.926:104): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198628579.927:105): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198628579.936:106): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198628588.795:107): user pid=16339 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=SELINUX_ERR msg=audit(1198628609.751:108): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198628609.751:108): arch=40000003 syscall=11 success=yes exit=0 a0=949d340 a1=949d358 a2=949c038 a3=0 items=0 ppid=16363 pid=16364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts5 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1198628622.423:109): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_ACCT msg=audit(1198628622.423:110): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_START msg=audit(1198628622.493:111): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1198628631.153:112): user pid=16370 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198630862.360:113): user pid=16467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198632322.348:114): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198632322.348:115): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198632322.601:116): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198632331.658:117): user pid=16535 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198632367.608:118): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198632367.608:119): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198632367.769:120): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198632376.024:121): user pid=16584 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1198632438.078:122): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=CRED_DISP msg=audit(1198632438.180:123): user pid=15641 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198632438.180:124): user pid=15641 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198632438.323:125): user pid=15930 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)'
>type=USER_END msg=audit(1198632440.140:126): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198632440.140:127): user pid=2989 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1198632455.486:1510): auditd normal halt, sending auid=4294967295 pid=16979 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1819
>type=DAEMON_START msg=audit(1198632685.555:1194): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1747 res=success, auditd pid=1747
>type=CONFIG_CHANGE msg=audit(1198632685.654:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198632685.654:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1198632685.688:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198632685.688:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_AUTH msg=audit(1198632724.417:8): user pid=2530 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198632724.424:9): user pid=2530 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198632724.438:10): user pid=2530 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198632724.447:11): login pid=2530 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198632724.466:12): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0 selected-context=unconfined_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198632724.536:13): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198632724.537:14): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198632759.227:15): user pid=2810 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1198632770.408:16): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198632770.408:17): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198632770.492:18): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198632943.052:19): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198632943.052:20): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198632943.169:21): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198632959.913:22): user pid=2874 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198633177.962:23): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1198633177.967:24): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1198633178.000:25): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1198633178.000:26): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1198633214.949:27): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1198633214.952:28): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1198633214.959:29): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1198633214.959:30): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1198633254.671:31): user pid=2816 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198634461.868:32): user pid=3083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198638061.510:33): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1198640192.206:34): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=signal interface=com.redhat.SEtroubleshootdIface member=restart dest=org.freedesktop.DBus spid=3312 tpid=2728 scontext=unconfined_u:system_r:rpm_script_t:s0 tcontext=unconfined_u:system_r:unconfined_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=ANOM_ABEND msg=audit(1198640200.975:35): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=2881 comm="dbus-launch" sig=6
>type=USER_AUTH msg=audit(1198640266.301:36): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198640266.301:37): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198640266.515:38): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198640273.298:39): user pid=3383 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1198640385.759:40): user pid=3709 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1198640439.890:41): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=3395 comm="dbus-launch" sig=6
>type=USER_CHAUTHTOK msg=audit(1198640504.119:42): user pid=6396 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640504.157:43): user pid=6397 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640507.508:44): user pid=6873 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=mailnull exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640507.510:45): user pid=6874 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=smmsp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640514.907:46): user pid=6915 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=sshd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640515.937:47): user pid=6929 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0 msg='op=adding group acct=jetty exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640516.013:48): user pid=6953 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=jetty exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640607.901:49): user pid=7090 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1198640608.015:50): user pid=7091 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1198640928.445:51): user pid=7445 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0 msg='op=adding user acct=mysql exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1198641282.813:52): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1198641282.676:53): policy loaded auid=500
>type=SYSCALL msg=audit(1198641282.676:53): arch=40000003 syscall=4 success=yes exit=3988647 a0=4 a1=b7b64000 a2=3cdca7 a3=bfe2db28 items=0 ppid=9066 pid=9067 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ACCT msg=audit(1198641662.012:54): user pid=9277 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198641799.525:55): user pid=9460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198641799.552:56): user pid=9460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198641799.806:57): user pid=9460 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198641799.808:58): login pid=9460 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198641799.808:59): user pid=9460 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198641799.810:60): user pid=9465 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=MAC_CONFIG_CHANGE msg=audit(1198641944.119:61): bool=use_nfs_home_dirs val=1 old_val=0 auid=500
>type=SYSCALL msg=audit(1198641944.119:61): arch=40000003 syscall=4 success=yes exit=2 a0=4 a1=bf9011f6 a2=2 a3=bf9011f8 items=0 ppid=9650 pid=9651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:system_r:setsebool_t:s0 key=(null)
>type=USER_AVC msg=audit(1198641944.124:62): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1198641959.049:63): user pid=1910 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1198641958.663:64): policy loaded auid=500
>type=SYSCALL msg=audit(1198641958.663:64): arch=40000003 syscall=4 success=yes exit=3988647 a0=4 a1=b7be6000 a2=3cdca7 a3=bfb2bbe8 items=0 ppid=9653 pid=9654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1198641959.738:65): user pid=9653 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1198641961.872:66): user pid=9656 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198641963.667:67): user pid=9657 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198641965.463:68): user pid=9658 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198641967.721:69): user pid=9663 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198641969.525:70): user pid=9664 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198641982.197:71): user pid=9665 uid=0 auid=500 subj=unconfined_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1198642062.802:72): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198642062.802:73): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198642063.834:74): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198642116.978:75): user pid=9684 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1198642235.784:76): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=9696 comm="dbus-launch" sig=6
>type=SELINUX_ERR msg=audit(1198642276.762:77): security_compute_sid:  invalid context unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:sshd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198642276.762:77): arch=40000003 syscall=11 success=yes exit=0 a0=9d494a0 a1=9d493f8 a2=9d46178 a3=0 items=0 ppid=9965 pid=9973 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198642280.362:78): security_compute_sid:  invalid context unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:sshd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198642280.362:78): arch=40000003 syscall=11 success=yes exit=0 a0=9d5ae28 a1=9d3e0b8 a2=9d46178 a3=0 items=0 ppid=9965 pid=9979 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198642528.706:79): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198642528.706:79): arch=40000003 syscall=11 success=yes exit=0 a0=92e3948 a1=92e37a8 a2=92e3c88 a3=0 items=0 ppid=10461 pid=10462 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198642686.928:80): security_compute_sid:  invalid context unconfined_u:system_r:crond_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:crond_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198642686.928:80): arch=40000003 syscall=11 success=yes exit=0 a0=88d4480 a1=88d1100 a2=88c3a00 a3=0 items=0 ppid=10575 pid=10585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="atd" exe="/usr/sbin/atd" subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1198642956.687:81): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198642956.687:82): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198642956.988:83): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=ANOM_ABEND msg=audit(1198642990.377:84): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=10932 comm="dbus-launch" sig=6
>type=USER_END msg=audit(1198642999.520:85): user pid=10892 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198643010.143:86): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198643010.143:87): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198643010.553:88): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198643013.618:89): user pid=10965 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198643056.415:90): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198643056.415:91): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198643056.493:92): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=SELINUX_ERR msg=audit(1198643069.661:93): security_compute_sid:  invalid context unconfined_u:system_r:crond_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:crond_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643069.661:93): arch=40000003 syscall=11 success=yes exit=0 a0=89de948 a1=89de7a8 a2=89dec88 a3=0 items=0 ppid=11025 pid=11026 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="crond" exe="/usr/sbin/crond" subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1198643110.821:94): user pid=10988 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198643117.597:95): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198643117.597:96): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198643117.607:97): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=SELINUX_ERR msg=audit(1198643134.927:98): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643134.927:98): arch=40000003 syscall=11 success=yes exit=0 a0=bfbede08 a1=bfbdfb20 a2=bfbdf940 a3=bfbdf940 items=0 ppid=10463 pid=11082 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-deviced" exe="/usr/lib/cups/daemon/cups-deviced" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643134.996:99): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643134.996:99): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11083 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="lpd" exe="/usr/lib/cups/backend/lpd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643135.091:100): security_compute_sid:  invalid context unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hplip_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643135.091:100): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11084 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hpfax" exe="/bin/env" subj=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643135.125:101): security_compute_sid:  invalid context unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643135.125:101): arch=40000003 syscall=11 success=yes exit=0 a0=bf91e33d a1=bf91e488 a2=bf91e494 a3=bf91ede3 items=0 ppid=11082 pid=11084 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="python" exe="/usr/bin/python" subj=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643136.588:102): security_compute_sid:  invalid context unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hplip_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643136.588:102): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11110 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hp" exe="/usr/lib/cups/backend/hp" subj=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643136.622:103): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643136.622:103): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11119 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="beh" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.159:104): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.159:104): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11120 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="serial" exe="/usr/lib/cups/backend/serial" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.183:105): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.183:105): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11121 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="ncp" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.208:106): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.208:106): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11122 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="http" exe="/usr/lib/cups/backend/ipp" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.221:107): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.221:107): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11123 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="dnssd" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.228:108): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.228:108): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfb00ff8 a2=8719b48 a3=400 items=0 ppid=11123 pid=11124 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.233:109): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.233:109): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=0 items=0 ppid=11082 pid=11126 auid=500 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) comm="ipp" exe="/usr/lib/cups/backend/ipp" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.318:110): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.318:110): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11127 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="snmp" exe="/usr/lib/cups/backend/snmp" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.372:111): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.372:111): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11128 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="parallel" exe="/usr/lib/cups/backend/parallel" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.471:112): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.471:112): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11137 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="smb" exe="/usr/bin/smbspool" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.587:113): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.587:113): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11138 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="usb" exe="/usr/lib/cups/backend/usb" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.605:114): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.605:114): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11139 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="socket" exe="/usr/lib/cups/backend/socket" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.633:115): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.633:115): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11140 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="scsi" exe="/usr/lib/cups/backend/scsi" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.647:116): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.647:116): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11141 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="bluetooth" exe="/usr/lib/cups/backend/bluetooth" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643137.685:117): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643137.685:117): arch=40000003 syscall=11 success=yes exit=0 a0=bf939224 a1=bf9370f8 a2=bf939cac a3=4 items=0 ppid=11082 pid=11142 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hal" exe="/usr/lib/cups/backend/hal" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643138.750:118): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643138.750:118): arch=40000003 syscall=11 success=yes exit=0 a0=bfbed608 a1=bfbdf280 a2=bfbdf0a0 a3=bfbdf0a0 items=0 ppid=10463 pid=11150 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-driverd" exe="/usr/lib/cups/daemon/cups-driverd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643141.598:119): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643141.598:119): arch=40000003 syscall=11 success=yes exit=0 a0=3b1dfd a1=bf832b1c a2=bf835b9c a3=400 items=0 ppid=11150 pid=11151 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643141.616:120): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643141.616:120): arch=40000003 syscall=11 success=yes exit=0 a0=9c73cd0 a1=9c73d70 a2=9c72f98 a3=40 items=0 ppid=11150 pid=11151 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643142.008:121): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643142.008:121): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfe393c8 a2=8ff2b48 a3=400 items=0 ppid=11151 pid=11152 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643142.013:122): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643142.013:123): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643142.013:123): arch=40000003 syscall=11 success=yes exit=0 a0=9716ef8 a1=9716040 a2=9716f80 a3=40 items=0 ppid=11152 pid=11154 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-perl-d" exe="/usr/bin/foomatic-perl-data" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643142.013:122): arch=40000003 syscall=11 success=yes exit=0 a0=97170f0 a1=9716f68 a2=9716020 a3=40 items=0 ppid=11152 pid=11153 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-combo-" exe="/usr/bin/foomatic-combo-xml" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643298.368:124): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643298.368:124): arch=40000003 syscall=11 success=yes exit=0 a0=bfbeb8f6 a1=bfbeb8dc a2=bfbeb6cc a3=bfbeb6cc items=0 ppid=10463 pid=11164 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-driverd" exe="/usr/lib/cups/daemon/cups-driverd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1198643298.714:125): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643298.848:126): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643298.853:127): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=SELINUX_ERR msg=audit(1198643321.835:128): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643321.836:129): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643321.837:130): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643321.835:128): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b830ae58 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11166 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="pstops" exe="/usr/lib/cups/filter/pstops" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643321.837:130): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b830ae58 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11168 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="socket" exe="/usr/lib/cups/backend/socket" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643321.836:129): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b830ae58 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11167 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643322.690:131): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643322.690:131): arch=40000003 syscall=11 success=yes exit=0 a0=bfcbda41 a1=99a8268 a2=999eb48 a3=999ed25 items=0 ppid=11167 pid=11169 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hostname" exe="/bin/hostname" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643322.747:132): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643322.747:132): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfcbc9a8 a2=999eb48 a3=400 items=0 ppid=11167 pid=11170 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643322.790:133): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643322.790:133): arch=40000003 syscall=11 success=yes exit=0 a0=93b7b10 a1=93b7ba8 a2=93b6d58 a3=0 items=0 ppid=11170 pid=11171 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643322.856:134): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643322.856:134): arch=40000003 syscall=11 success=yes exit=0 a0=bfcbda2d a1=9cb3ad8 a2=999eb48 a3=9c99405 items=0 ppid=11172 pid=11174 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava-wrappe" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643322.905:135): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643322.905:135): arch=40000003 syscall=11 success=yes exit=0 a0=95fa6b8 a1=95fd228 a2=95f9d58 a3=40 items=0 ppid=11174 pid=11175 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="basename" exe="/bin/basename" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643322.939:136): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643322.939:136): arch=40000003 syscall=11 success=yes exit=0 a0=95fdc48 a1=95fdeb8 a2=95fdd98 a3=0 items=0 ppid=11174 pid=11176 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643323.131:137): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643323.131:137): arch=40000003 syscall=11 success=yes exit=0 a0=95fa658 a1=95fa738 a2=95fdd98 a3=40 items=0 ppid=11174 pid=11178 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643324.169:138): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643324.169:138): arch=40000003 syscall=11 success=yes exit=0 a0=9601bd8 a1=95f9e20 a2=95fdd98 a3=40 items=0 ppid=11174 pid=11179 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643324.183:139): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643324.185:140): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643324.186:141): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643324.186:141): arch=40000003 syscall=11 success=yes exit=0 a0=9605b70 a1=9600d98 a2=96084d8 a3=40 items=0 ppid=11174 pid=11182 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643324.204:142): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643324.204:142): arch=40000003 syscall=11 success=yes exit=0 a0=9605b60 a1=9605c98 a2=96084d8 a3=40 items=0 ppid=11174 pid=11181 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643324.183:139): arch=40000003 syscall=11 success=yes exit=0 a0=9607e50 a1=9604c48 a2=96084d8 a3=40 items=0 ppid=11174 pid=11180 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2zjs-pstops" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643324.232:143): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643324.232:143): arch=40000003 syscall=11 success=yes exit=0 a0=9cb5570 a1=9cb3598 a2=9cb5ae0 a3=40 items=0 ppid=11180 pid=11184 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643324.243:144): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643324.185:140): arch=40000003 syscall=11 success=yes exit=0 a0=9604bf8 a1=95fa480 a2=96084d8 a3=40 items=0 ppid=11174 pid=11183 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava" exe="/usr/bin/foo2lava" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643324.243:144): arch=40000003 syscall=11 success=yes exit=0 a0=9cb6348 a1=9cb2fd0 a2=9cb5ae0 a3=0 items=0 ppid=11180 pid=11185 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sed" exe="/bin/sed" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643326.035:145): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643326.035:145): arch=40000003 syscall=11 success=yes exit=0 a0=238dfd a1=bfda305c a2=bfda58d0 a3=400 items=0 ppid=11182 pid=11186 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643326.038:146): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643326.038:146): arch=40000003 syscall=11 success=yes exit=0 a0=813ab00 a1=813ac68 a2=8139e38 a3=0 items=0 ppid=11186 pid=11187 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643327.105:147): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643327.105:147): arch=40000003 syscall=11 success=yes exit=0 a0=9604b70 a1=95fd510 a2=96084d8 a3=0 items=0 ppid=11174 pid=11188 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643327.109:148): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643327.109:148): arch=40000003 syscall=11 success=yes exit=0 a0=9604a60 a1=9606c68 a2=96084d8 a3=0 items=0 ppid=11174 pid=11189 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1198643351.072:149): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.165:150): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.171:151): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.176:152): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.184:153): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.192:154): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.197:155): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.202:156): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.208:157): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.213:158): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.218:159): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.223:160): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.228:161): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.233:162): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.239:163): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.244:164): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.250:165): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643361.256:166): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198643382.412:167): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=SELINUX_ERR msg=audit(1198643419.930:168): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643419.931:169): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643419.931:169): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b8a9b438 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11194 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643419.932:170): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643419.930:168): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b8a9b438 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11193 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="pstops" exe="/usr/lib/cups/filter/pstops" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643419.932:170): arch=40000003 syscall=11 success=yes exit=0 a0=bfbec580 a1=b8a9b438 a2=bfbeae98 a3=bfbeae98 items=0 ppid=10463 pid=11195 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="socket" exe="/usr/lib/cups/backend/socket" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.312:171): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hostname_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.312:171): arch=40000003 syscall=11 success=yes exit=0 a0=bfcc49f1 a1=8e492c0 a2=8e3fb48 a3=8e3fd25 items=0 ppid=11194 pid=11197 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hostname" exe="/bin/hostname" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.349:172): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.349:172): arch=40000003 syscall=11 success=yes exit=0 a0=21203e a1=bfcc3958 a2=8e3fb48 a3=400 items=0 ppid=11194 pid=11198 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.368:173): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.368:173): arch=40000003 syscall=11 success=yes exit=0 a0=8814b10 a1=8814ba8 a2=8813d58 a3=0 items=0 ppid=11198 pid=11199 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.399:174): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.399:174): arch=40000003 syscall=11 success=yes exit=0 a0=bfcc49dd a1=9154f68 a2=8e3fb48 a3=8e48d45 items=0 ppid=11200 pid=11202 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava-wrappe" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.402:175): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.402:175): arch=40000003 syscall=11 success=yes exit=0 a0=95096c8 a1=9509830 a2=9508d58 a3=40 items=0 ppid=11202 pid=11203 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="basename" exe="/bin/basename" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.417:176): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.417:176): arch=40000003 syscall=11 success=yes exit=0 a0=950cda8 a1=950d018 a2=950cef8 a3=0 items=0 ppid=11202 pid=11204 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.435:177): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.435:177): arch=40000003 syscall=11 success=yes exit=0 a0=9509658 a1=9509738 a2=950cef8 a3=40 items=0 ppid=11202 pid=11206 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.452:178): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.452:178): arch=40000003 syscall=11 success=yes exit=0 a0=9510c28 a1=9508e20 a2=950cef8 a3=40 items=0 ppid=11202 pid=11207 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.653:179): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.653:179): arch=40000003 syscall=11 success=yes exit=0 a0=9516e50 a1=9513c68 a2=95174f8 a3=40 items=0 ppid=11202 pid=11208 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2zjs-pstops" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.655:180): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.655:180): arch=40000003 syscall=11 success=yes exit=0 a0=9514b20 a1=950fde8 a2=95174f8 a3=40 items=0 ppid=11202 pid=11210 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="gs" exe="/usr/bin/gs" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.656:181): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:bin_t:s0 tclass=process
>type=SELINUX_ERR msg=audit(1198643420.657:182): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.657:182): arch=40000003 syscall=11 success=yes exit=0 a0=9514ab0 a1=9514b50 a2=95174f8 a3=40 items=0 ppid=11202 pid=11209 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.661:183): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.661:183): arch=40000003 syscall=11 success=yes exit=0 a0=8795570 a1=8793598 a2=8795ae0 a3=40 items=0 ppid=11208 pid=11212 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="expr" exe="/usr/bin/expr" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643420.665:184): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643420.656:181): arch=40000003 syscall=11 success=yes exit=0 a0=9513c18 a1=9509480 a2=95174f8 a3=40 items=0 ppid=11202 pid=11211 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava" exe="/usr/bin/foo2lava" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SYSCALL msg=audit(1198643420.665:184): arch=40000003 syscall=11 success=yes exit=0 a0=8796348 a1=8792fd0 a2=8795ae0 a3=0 items=0 ppid=11208 pid=11213 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sed" exe="/bin/sed" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643423.743:185): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643423.743:185): arch=40000003 syscall=11 success=yes exit=0 a0=238dfd a1=bfed59ac a2=bfed8200 a3=400 items=0 ppid=11210 pid=11214 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643423.748:186): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643423.748:186): arch=40000003 syscall=11 success=yes exit=0 a0=8204b00 a1=8204c68 a2=8203e38 a3=0 items=0 ppid=11214 pid=11215 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cat" exe="/bin/cat" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643426.573:187): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643426.573:187): arch=40000003 syscall=11 success=yes exit=0 a0=9513b90 a1=950c5b8 a2=95174f8 a3=0 items=0 ppid=11202 pid=11216 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=SELINUX_ERR msg=audit(1198643426.576:188): security_compute_sid:  invalid context unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=process
>type=SYSCALL msg=audit(1198643426.576:188): arch=40000003 syscall=11 success=yes exit=0 a0=9513a80 a1=9515c88 a2=95174f8 a3=0 items=0 ppid=11202 pid=11217 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="logger" exe="/usr/bin/logger" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1198643568.683:189): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=10997 comm="dbus-launch" sig=6
>type=CRED_DISP msg=audit(1198643990.598:190): user pid=9460 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198643990.639:191): user pid=9460 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=SELINUX_ERR msg=audit(1198645261.676:192): security_compute_sid:  invalid context unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198645261.676:192): arch=40000003 syscall=11 success=yes exit=0 a0=147a18 a1=bfa4390c a2=149408 a3=400 items=0 ppid=11294 pid=11295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="unix_update" exe="/sbin/unix_update" subj=unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1198645261.760:193): user pid=11294 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198645261.789:194): user pid=11294 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198645261.789:195): login pid=11294 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1198645261.811:196): user pid=11294 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198645261.920:197): user pid=11294 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198645261.920:198): user pid=11294 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=SELINUX_ERR msg=audit(1198648861.304:199): security_compute_sid:  invalid context unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198648861.304:199): arch=40000003 syscall=11 success=yes exit=0 a0=147a18 a1=bfa4390c a2=149408 a3=400 items=0 ppid=11429 pid=11430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="unix_update" exe="/sbin/unix_update" subj=unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1198648861.307:200): user pid=11429 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198648861.307:201): user pid=11429 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198648861.307:202): login pid=11429 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1198648861.309:203): user pid=11429 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198648861.315:204): user pid=11429 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198648861.315:205): user pid=11429 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198650509.182:206): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198650509.248:207): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1198650533.930:208): user pid=11074 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198650548.379:209): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198650548.379:210): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198650548.443:211): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198650560.847:212): user pid=11498 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198650568.233:213): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198650568.233:214): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198650568.241:215): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198650603.763:216): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198650603.766:217): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1198650609.219:218): user pid=11517 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198650614.961:219): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198650614.961:220): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198650614.970:221): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198650644.519:222): user pid=11527 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198650649.759:223): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198650649.759:224): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198650649.767:225): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198651326.239:226): user pid=11536 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198651435.759:227): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198651435.759:228): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198651435.769:229): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198651622.219:230): user pid=11576 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198651760.236:231): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198651760.236:232): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198651760.252:233): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198651764.437:234): user pid=11601 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198651824.574:235): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198651824.574:236): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198651824.581:237): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198651830.078:238): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198651830.082:239): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1198651833.188:240): user pid=11614 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198652099.115:241): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198652099.115:242): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198652099.123:243): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198652105.315:244): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198652105.319:245): user pid=10463 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1198652139.530:246): user pid=11643 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198652144.409:247): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_ACCT msg=audit(1198652144.409:248): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_START msg=audit(1198652144.418:249): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)'
>type=USER_END msg=audit(1198652385.357:250): user pid=11652 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=SELINUX_ERR msg=audit(1198652461.669:251): security_compute_sid:  invalid context unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198652461.669:251): arch=40000003 syscall=11 success=yes exit=0 a0=147a18 a1=bfa4390c a2=149408 a3=400 items=0 ppid=11692 pid=11693 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="unix_update" exe="/sbin/unix_update" subj=unconfined_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1198652461.672:252): user pid=11692 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198652461.673:253): user pid=11692 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198652461.673:254): login pid=11692 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1198652461.674:255): user pid=11692 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198652461.680:256): user pid=11692 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198652461.680:257): user pid=11692 uid=0 auid=0 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198655366.700:258): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1198655366.700:259): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1198655366.829:260): user pid=3010 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1198655366.829:261): user pid=2941 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1198655367.461:262): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198655367.461:263): user pid=2530 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1198655383.853:1195): auditd normal halt, sending auid=4294967295 pid=12221 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1747
>type=DAEMON_START msg=audit(1198655437.452:8917): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1797 res=success, auditd pid=1797
>type=CONFIG_CHANGE msg=audit(1198655437.553:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198655437.553:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1198655437.586:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198655437.586:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1198655451.283:8): user pid=2292 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198655451.440:9): user pid=2292 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198655470.131:10): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198655470.139:11): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198655470.140:12): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198655470.149:13): login pid=2590 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198655470.175:14): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198655470.240:15): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198655470.241:16): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198656061.862:17): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198656061.863:18): user pid=2962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198656061.863:19): login pid=2962 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198656061.872:20): user pid=2962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198656061.905:21): user pid=2962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198656061.905:22): user pid=2962 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198659661.919:23): user pid=3231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198659661.919:24): user pid=3231 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198659661.920:25): login pid=3231 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198659661.926:26): user pid=3231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198659661.930:27): user pid=3231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198659661.930:28): user pid=3231 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198663262.089:29): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198663262.090:30): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198663262.090:31): login pid=10538 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198663262.110:32): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198663262.119:33): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198663262.119:34): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198663321.126:35): user pid=10544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198663321.127:36): user pid=10544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198663321.127:37): login pid=10544 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198663321.134:38): user pid=10544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198664033.869:39): user pid=10544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198664033.869:40): user pid=10544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198666861.883:41): user pid=12648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198666861.884:42): user pid=12648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198666861.884:43): login pid=12648 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198666861.891:44): user pid=12648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198666861.896:45): user pid=12648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198666861.897:46): user pid=12648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198670461.909:47): user pid=12787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198670461.909:48): user pid=12787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198670461.909:49): login pid=12787 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198670461.917:50): user pid=12787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198670461.922:51): user pid=12787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198670461.922:52): user pid=12787 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198674061.935:53): user pid=12948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198674061.936:54): user pid=12948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198674061.936:55): login pid=12948 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198674061.944:56): user pid=12948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198674061.948:57): user pid=12948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198674061.949:58): user pid=12948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198677661.962:59): user pid=13191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198677661.963:60): user pid=13191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198677661.963:61): login pid=13191 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198677661.973:62): user pid=13191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198677661.976:63): user pid=13191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198677661.977:64): user pid=13191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198681261.990:65): user pid=13327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198681261.990:66): user pid=13327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198681261.990:67): login pid=13327 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198681261.998:68): user pid=13327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198681262.003:69): user pid=13327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198681262.003:70): user pid=13327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198684861.018:71): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198684861.019:72): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198684861.019:73): login pid=13942 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198684861.025:74): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198684861.029:75): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198684861.030:76): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198688461.043:77): user pid=14078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198688461.044:78): user pid=14078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198688461.044:79): login pid=14078 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198688461.049:80): user pid=14078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198688461.053:81): user pid=14078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198688461.053:82): user pid=14078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198692061.067:83): user pid=14219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198692061.067:84): user pid=14219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198692061.067:85): login pid=14219 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198692061.075:86): user pid=14219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198692061.080:87): user pid=14219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198692061.081:88): user pid=14219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198693189.312:89): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198693189.312:90): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693189.359:91): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198693276.054:92): user pid=14296 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198693284.222:93): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198693284.222:94): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693284.233:95): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198693353.488:96): user pid=14308 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198693364.804:97): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198693364.805:98): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198693382.250:99): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1198693382.251:100): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1198693395.323:101): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1198693395.323:102): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1198693415.262:103): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1198693415.262:104): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1198693424.645:105): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198693424.652:106): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198693424.653:107): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198693424.654:108): login pid=2590 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198693424.717:109): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693424.748:110): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198693424.748:111): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198693446.649:112): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198693446.649:113): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693446.658:114): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198693496.215:115): user pid=14562 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198693501.991:116): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198693501.991:117): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198693513.094:118): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198693513.101:119): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198693513.102:120): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198693513.103:121): login pid=2590 uid=0 old auid=500 new auid=501
>type=USER_ROLE_CHANGE msg=audit(1198693513.123:122): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693513.135:123): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198693513.136:124): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198693566.236:125): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198693566.236:126): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198693581.190:127): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198693581.196:128): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198693581.196:129): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198693581.197:130): login pid=2590 uid=0 old auid=501 new auid=501
>type=USER_ROLE_CHANGE msg=audit(1198693581.215:131): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693581.229:132): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198693581.230:133): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198693619.833:134): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198693619.834:135): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198693648.408:136): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198693648.413:137): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198693648.414:138): user pid=2590 uid=0 auid=501 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198693648.415:139): login pid=2590 uid=0 old auid=501 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198693648.432:140): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693648.444:141): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198693648.445:142): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198693661.561:143): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198693661.561:144): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198693661.570:145): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198693914.392:146): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1198693914.395:147): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1198693914.406:148): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1198693914.406:149): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1198693979.499:150): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1198693979.499:151): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1198693979.504:152): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1198693979.504:153): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1198694005.349:154): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1198694005.350:155): user pid=15132 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1198694006.214:156): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1198694006.214:157): user pid=15094 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1198694014.281:158): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1198694014.284:159): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1198694014.293:160): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1198694014.293:161): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1198694024.678:162): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1198694024.678:163): user pid=15178 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1198694036.889:164): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1198694036.891:165): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1198694036.905:166): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1198694036.905:167): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1198694041.144:168): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1198694041.144:169): user pid=15222 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=old exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1198694054.621:170): user pid=15039 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198694060.693:171): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694060.693:172): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694071.404:173): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694071.411:174): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694071.411:175): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694071.412:176): login pid=2590 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198694071.431:177): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694071.445:178): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694071.446:179): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198694155.653:180): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694155.654:181): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694168.877:182): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694168.884:183): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694168.885:184): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694168.886:185): login pid=2590 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198694168.906:186): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694168.921:187): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694168.922:188): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198694212.889:189): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694212.889:190): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694229.166:191): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694229.172:192): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694229.172:193): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694229.173:194): login pid=2590 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198694229.193:195): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694229.208:196): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694229.208:197): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694254.143:198): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198694254.144:199): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694254.153:200): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198694520.894:201): user pid=15994 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198694527.460:202): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694527.460:203): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694537.441:204): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694537.448:205): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694537.448:206): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694537.449:207): login pid=2590 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198694537.468:208): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694537.481:209): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694537.482:210): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198694720.937:211): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694720.937:212): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694733.683:213): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694733.688:214): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694733.688:215): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694733.689:216): login pid=2590 uid=0 old auid=500 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1198694733.708:217): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694733.723:218): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694733.723:219): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198694843.337:220): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694843.337:221): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694861.449:222): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=old exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1198694861.449:223): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1198694872.532:224): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694872.540:225): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694872.540:226): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694872.541:227): login pid=2590 uid=0 old auid=0 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198694872.563:228): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694872.577:229): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694872.577:230): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_END msg=audit(1198694887.919:231): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694887.919:232): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694897.780:233): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694897.784:234): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694897.785:235): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694897.787:236): login pid=2590 uid=0 old auid=500 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1198694897.801:237): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694897.817:238): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694897.817:239): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694912.132:240): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198694912.132:241): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694912.146:242): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198694934.260:243): user pid=17452 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198694938.751:244): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198694938.751:245): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198694948.294:246): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198694948.301:247): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198694948.301:248): user pid=2590 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198694948.303:249): login pid=2590 uid=0 old auid=0 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198694948.324:250): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198694948.338:251): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198694948.338:252): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1198694949.619:253): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17607 comm="root" sig=11
>type=ANOM_ABEND msg=audit(1198694949.621:254): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17615 comm="root" sig=11
>type=USER_AUTH msg=audit(1198695563.866:255): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1198695563.869:256): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_START msg=audit(1198695563.878:257): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_ACQ msg=audit(1198695563.878:258): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_DISP msg=audit(1198695574.566:259): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1198695574.567:260): user pid=19131 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=ANOM_ABEND msg=audit(1198695577.383:261): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19172 comm="root" sig=11
>type=USER_AUTH msg=audit(1198695653.130:262): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1198695653.134:263): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_START msg=audit(1198695653.145:264): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=CRED_ACQ msg=audit(1198695653.145:265): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_ACCT msg=audit(1198695661.099:266): user pid=19212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198695661.099:267): user pid=19212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198695661.100:268): login pid=19212 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198695661.106:269): user pid=19212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198695661.111:270): user pid=19212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198695661.111:271): user pid=19212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198695673.463:272): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=USER_END msg=audit(1198695673.464:273): user pid=19179 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)'
>type=ANOM_ABEND msg=audit(1198695676.120:274): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19215 comm="root" sig=11
>type=USER_END msg=audit(1198695692.548:275): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198695692.549:276): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198695702.173:277): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198695702.181:278): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198695702.181:279): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198695702.182:280): login pid=2590 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198695702.203:281): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198695702.219:282): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198695702.220:283): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198698046.120:284): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198698046.227:285): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198699261.383:286): user pid=16622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198699261.383:287): user pid=16622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198699261.384:288): login pid=16622 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198699261.390:289): user pid=16622 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198699261.448:290): user pid=16622 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198699261.449:291): user pid=16622 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198702861.572:292): user pid=14298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198702861.572:293): user pid=14298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198702861.573:294): login pid=14298 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198702861.593:295): user pid=14298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198702861.626:296): user pid=14298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198702861.626:297): user pid=14298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198706461.657:298): user pid=14459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198706461.658:299): user pid=14459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198706461.658:300): login pid=14459 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198706461.666:301): user pid=14459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198706461.710:302): user pid=14459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198706461.711:303): user pid=14459 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198708285.359:304): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198708285.359:305): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198708285.449:306): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198710061.727:307): user pid=20344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198710061.728:308): user pid=20344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198710061.728:309): login pid=20344 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198710061.735:310): user pid=20344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198710061.742:311): user pid=20344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198710061.742:312): user pid=20344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198710195.649:313): avc:  denied  { getattr } for  pid=20352 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198710195.649:313): arch=40000003 syscall=195 success=yes exit=0 a0=b8119ff0 a1=bf977620 a2=5e1ff4 a3=b8119ff0 items=0 ppid=2056 pid=20352 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198710195.665:314): avc:  denied  { read } for  pid=20352 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198710195.665:314): arch=40000003 syscall=5 success=yes exit=4 a0=b8119ff0 a1=8000 a2=1b6 a3=b8119160 items=0 ppid=2056 pid=20352 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1198710195.672:315): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198710195.677:316): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198710200.146:317): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198710200.150:318): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198710200.210:319): user pid=20352 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198710200.212:320): login pid=20352 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198710200.212:321): user pid=20352 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198710200.214:322): user pid=20362 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198710203.625:323): user pid=20352 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1198710203.625:324): user pid=20352 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_AUTH msg=audit(1198710684.707:325): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198710684.707:326): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198710684.729:327): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198710697.188:328): user pid=20448 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1198712112.339:329): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20575 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712151.241:330): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20597 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712252.107:331): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20615 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712266.528:332): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20630 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712614.283:333): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20665 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712668.896:334): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20675 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712740.327:335): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20692 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712781.297:336): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20698 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712839.765:337): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20701 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712856.902:338): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20702 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712894.120:339): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20709 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712969.370:340): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20742 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198712990.618:341): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20749 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198713057.553:342): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20756 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198713488.962:343): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20841 comm="gs" sig=11
>type=USER_ACCT msg=audit(1198713661.904:344): user pid=30666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198713661.923:345): user pid=30666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198713661.924:346): login pid=30666 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198713661.930:347): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198713661.978:348): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198713661.979:349): user pid=30666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198714033.867:350): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2478 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198714146.780:351): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2487 comm="gs.foo" sig=11
>type=ANOM_ABEND msg=audit(1198714277.415:352): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2510 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198714387.575:353): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2517 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198714452.598:354): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2521 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198714944.596:355): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2584 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198714981.280:356): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2588 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198715434.836:357): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2643 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198715644.413:358): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2689 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198715692.743:359): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2726 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198715699.670:360): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2745 comm="gs" sig=11
>type=USER_ACCT msg=audit(1198717261.258:361): user pid=2830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198717261.278:362): user pid=2830 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198717261.278:363): login pid=2830 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198717261.286:364): user pid=2830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198717261.335:365): user pid=2830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198717261.336:366): user pid=2830 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198718510.255:367): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2894 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198718563.819:368): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2899 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198718589.562:369): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2903 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198719916.724:370): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3430 comm="gs" sig=11
>type=USER_ACCT msg=audit(1198720861.350:371): user pid=3535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198720861.350:372): user pid=3535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198720861.350:373): login pid=3535 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198720861.356:374): user pid=3535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198720861.362:375): user pid=3535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198720861.362:376): user pid=3535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198721492.534:377): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3587 comm="gs" sig=11
>type=USER_ACCT msg=audit(1198724461.501:378): user pid=3759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198724461.528:379): user pid=3759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198724461.529:380): login pid=3759 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198724461.534:381): user pid=3759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198724461.579:382): user pid=3759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198724461.579:383): user pid=3759 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198728061.605:384): user pid=3926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198728061.605:385): user pid=3926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198728061.605:386): login pid=3926 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198728061.613:387): user pid=3926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198728061.618:388): user pid=3926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198728061.618:389): user pid=3926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198731661.632:390): user pid=4092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198731661.633:391): user pid=4092 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198731661.633:392): login pid=4092 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198731661.641:393): user pid=4092 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198731661.646:394): user pid=4092 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198731661.647:395): user pid=4092 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198735261.660:396): user pid=4264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198735261.661:397): user pid=4264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198735261.661:398): login pid=4264 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198735261.668:399): user pid=4264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198735261.673:400): user pid=4264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198735261.673:401): user pid=4264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198737456.176:402): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4755 comm="gs" sig=11
>type=USER_ACCT msg=audit(1198738861.687:403): user pid=5694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198738861.688:404): user pid=5694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198738861.688:405): login pid=5694 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198738861.697:406): user pid=5694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198738861.702:407): user pid=5694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198738861.702:408): user pid=5694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198742461.716:409): user pid=6289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198742461.716:410): user pid=6289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198742461.717:411): login pid=6289 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198742461.726:412): user pid=6289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198742461.730:413): user pid=6289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198742461.730:414): user pid=6289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198746061.744:415): user pid=6909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198746061.745:416): user pid=6909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198746061.745:417): login pid=6909 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198746061.752:418): user pid=6909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198746061.758:419): user pid=6909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198746061.758:420): user pid=6909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198749661.772:421): user pid=7068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198749661.773:422): user pid=7068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198749661.773:423): login pid=7068 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198749661.779:424): user pid=7068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198749661.785:425): user pid=7068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198749661.785:426): user pid=7068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198749721.792:427): user pid=7074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198749721.793:428): user pid=7074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198749721.793:429): login pid=7074 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198749721.801:430): user pid=7074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198750283.621:431): user pid=7074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198750283.641:432): user pid=7074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198752979.689:433): avc:  denied  { getattr } for  pid=10320 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198752979.689:433): arch=40000003 syscall=195 success=yes exit=0 a0=b8519c38 a1=bf97c620 a2=5e1ff4 a3=b8519c38 items=0 ppid=2056 pid=10320 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198752979.689:434): avc:  denied  { read } for  pid=10320 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198752979.689:434): arch=40000003 syscall=5 success=yes exit=4 a0=b8519c38 a1=8000 a2=1b6 a3=b8518da8 items=0 ppid=2056 pid=10320 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1198752979.791:435): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198752979.792:436): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198752982.933:437): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198752983.007:438): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198752983.214:439): user pid=10320 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198752983.237:440): login pid=10320 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198752983.237:441): user pid=10320 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198752983.239:442): user pid=10324 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198752984.745:443): user pid=10320 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198752984.746:444): user pid=10320 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198753261.679:445): user pid=10382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198753261.680:446): user pid=10382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198753261.680:447): login pid=10382 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198753261.686:448): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198753261.691:449): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198753261.692:450): user pid=10382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198754030.573:451): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198754030.573:452): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198754030.663:453): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198754128.244:454): user pid=10418 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1198754382.877:455): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1198754382.877:455): arch=40000003 syscall=5 per=400000 success=yes exit=174 a0=bfebaab2 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11808 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198754810.290:456): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1198754810.290:456): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ae a1=0 a2=b41f912c a3=9a4d320 items=0 ppid=1 pid=11821 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198754810.312:457): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1198754810.312:457): arch=40000003 syscall=5 per=400000 success=yes exit=174 a0=b41f9102 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11821 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198754811.579:458): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1198754811.579:458): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ae a1=0 a2=bfebb06c a3=9b47f28 items=0 ppid=1 pid=11808 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198755841.547:459): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1198755841.547:459): arch=40000003 syscall=5 per=400000 success=yes exit=130 a0=bfc7b802 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11902 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198755851.343:460): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1198755851.343:460): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=82 a1=0 a2=234814c a3=91d0938 items=0 ppid=1 pid=11905 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198755851.343:461): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1198755851.343:461): arch=40000003 syscall=5 per=400000 success=yes exit=130 a0=23480e2 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11905 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198756022.440:462): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1198756022.440:462): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=82 a1=0 a2=bfc7bd9c a3=b6e1fce8 items=0 ppid=1 pid=11902 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198756041.615:463): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1198756041.615:463): arch=40000003 syscall=5 per=400000 success=yes exit=160 a0=bfb12482 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11936 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1198756076.928:464): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1198756076.928:464): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=a0 a1=0 a2=bfb12a3c a3=8837688 items=0 ppid=1 pid=11936 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1198756861.801:465): user pid=11994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198756861.837:466): user pid=11994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198756861.837:467): login pid=11994 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198756861.891:468): user pid=11994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198756862.181:469): user pid=11994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198756862.181:470): user pid=11994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198757174.775:471): avc:  denied  { getattr } for  pid=12023 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198757174.775:471): arch=40000003 syscall=195 success=yes exit=0 a0=b8f19c38 a1=bfb66810 a2=5e1ff4 a3=b8f19c38 items=0 ppid=2056 pid=12023 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198757174.775:472): avc:  denied  { read } for  pid=12023 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198757174.775:472): arch=40000003 syscall=5 success=yes exit=4 a0=b8f19c38 a1=8000 a2=1b6 a3=b8f18da8 items=0 ppid=2056 pid=12023 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1198757174.833:473): user pid=12023 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198757174.995:474): user pid=12023 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198757174.997:475): login pid=12023 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198757174.997:476): user pid=12023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198757174.999:477): user pid=12026 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198757175.978:478): user pid=12023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_END msg=audit(1198757175.978:479): user pid=12023 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198760461.250:480): user pid=14494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198760461.251:481): user pid=14494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198760461.251:482): login pid=14494 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198760461.258:483): user pid=14494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198760461.282:484): user pid=14494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198760461.282:485): user pid=14494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198761490.979:486): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14716 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198761505.907:487): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14718 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198761594.565:488): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14725 comm="monitor" sig=11
>type=USER_ACCT msg=audit(1198764061.354:489): user pid=14896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198764061.360:490): user pid=14896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198764061.360:491): login pid=14896 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198764061.364:492): user pid=14896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198764061.369:493): user pid=14896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198764061.369:494): user pid=14896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198767661.381:495): user pid=15050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198767661.381:496): user pid=15050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198767661.382:497): login pid=15050 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198767661.386:498): user pid=15050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198767661.391:499): user pid=15050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198767661.391:500): user pid=15050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1198768289.689:501): user pid=15081 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=success)'
>type=USER_CHAUTHTOK msg=audit(1198768289.689:502): user pid=15081 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user to group acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=success)'
>type=USER_CHAUTHTOK msg=audit(1198768289.689:503): user pid=15081 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user to shadow group acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=success)'
>type=USER_CHAUTHTOK msg=audit(1198768293.741:504): user pid=15091 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=nut exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/15 res=failed)'
>type=ANOM_ABEND msg=audit(1198769237.736:505): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16200 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1198771261.407:506): user pid=16300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198771261.407:507): user pid=16300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198771261.407:508): login pid=16300 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198771261.415:509): user pid=16300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198771261.421:510): user pid=16300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198771261.421:511): user pid=16300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198771598.421:512): avc:  denied  { execmod } for  pid=20389 comm="firefox-bin" path="/home/rick/.mozilla/plugins/nppdf.so" dev=dm-0 ino=28442626 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198771598.421:512): arch=40000003 syscall=125 success=yes exit=0 a0=564b000 a1=108000 a2=5 a3=bf88f5b0 items=0 ppid=20384 pid=20389 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="firefox-bin" exe="/usr/lib/firefox-2.0.0.10/firefox-bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AUTH msg=audit(1198771714.452:513): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198771714.452:514): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198771714.546:515): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198771778.362:516): user pid=16326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1198771795.399:517): avc:  denied  { execmod } for  pid=20389 comm="firefox-bin" path="/home/rick/.mozilla/plugins/nppdf.so" dev=dm-0 ino=28442626 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198771795.399:517): arch=40000003 syscall=125 success=yes exit=0 a0=1e54000 a1=108000 a2=5 a3=bf88f5b0 items=0 ppid=20384 pid=20389 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="firefox-bin" exe="/usr/lib/firefox-2.0.0.10/firefox-bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1198772114.185:518): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2359 comm="hald" sig=11
>type=ANOM_ABEND msg=audit(1198772114.224:519): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:hald_t:s0 pid=2400 comm="hald-addon-cpuf" sig=6
>type=ANOM_ABEND msg=audit(1198772535.305:520): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19541 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198773289.151:521): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19643 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198773313.560:522): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19679 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198773412.883:523): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19688 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198773463.426:524): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19693 comm="monitor" sig=11
>type=ANOM_ABEND msg=audit(1198773868.757:525): auid=500 uid=0 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19746 comm="monitor" sig=11
>type=USER_ACCT msg=audit(1198774861.690:526): user pid=19835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198774861.691:527): user pid=19835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198774861.691:528): login pid=19835 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198774861.698:529): user pid=19835 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198774861.749:530): user pid=19835 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198774861.749:531): user pid=19835 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198777131.067:532): avc:  denied  { execmod } for  pid=20389 comm="firefox-bin" path="/usr/lib/firefox-2.0.0.10/plugins/nppdf.so" dev=dm-0 ino=48404044 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1198777131.067:532): arch=40000003 syscall=125 success=yes exit=0 a0=6cfc000 a1=108000 a2=5 a3=bf8910e0 items=0 ppid=20384 pid=20389 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="firefox-bin" exe="/usr/lib/firefox-2.0.0.10/firefox-bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AUTH msg=audit(1198777209.769:533): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198777209.769:534): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198777209.857:535): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198777246.346:536): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198777246.349:537): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198777246.389:538): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1198777246.389:539): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1198777247.133:540): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198777247.134:541): user pid=24990 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198777247.147:542): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198777247.147:543): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198777247.156:544): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1198777247.156:545): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1198777247.164:546): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198777247.165:547): user pid=25014 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198777247.170:548): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198777247.170:549): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198777247.179:550): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1198777247.180:551): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1198777247.188:552): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198777247.190:553): user pid=25018 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198777247.195:554): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198777247.195:555): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198777247.203:556): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1198777247.204:557): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1198777247.212:558): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198777247.212:559): user pid=25022 uid=0 auid=500 subj=system_u:system_r:rpm_script_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198777253.901:560): user pid=20103 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198778462.161:561): user pid=26805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198778462.162:562): user pid=26805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198778462.162:563): login pid=26805 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198778462.174:564): user pid=26805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198778462.220:565): user pid=26805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198778462.220:566): user pid=26805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198782061.232:567): user pid=26972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198782061.233:568): user pid=26972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198782061.233:569): login pid=26972 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198782061.240:570): user pid=26972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198782061.244:571): user pid=26972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198782061.244:572): user pid=26972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198785661.256:573): user pid=27138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198785661.257:574): user pid=27138 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198785661.257:575): login pid=27138 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198785661.261:576): user pid=27138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198785661.265:577): user pid=27138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198785661.265:578): user pid=27138 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198789261.278:579): user pid=27299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198789261.279:580): user pid=27299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198789261.279:581): login pid=27299 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198789261.285:582): user pid=27299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198789261.289:583): user pid=27299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198789261.289:584): user pid=27299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198790681.259:585): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198790681.259:586): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198790681.374:587): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198790742.120:588): user pid=27397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198791298.672:589): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198791298.672:590): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198791298.700:591): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198791511.978:592): user pid=27464 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198792861.314:593): user pid=1107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198792861.315:594): user pid=1107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198792861.315:595): login pid=1107 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198792861.321:596): user pid=1107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198792861.326:597): user pid=1107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198792861.327:598): user pid=1107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198793406.870:599): avc:  denied  { read } for  pid=4717 comm="cvs" name="config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198793406.870:599): arch=40000003 syscall=5 success=yes exit=3 a0=90c6640 a1=8000 a2=1b6 a3=90c6b60 items=0 ppid=4630 pid=4717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198793406.891:600): avc:  denied  { getattr } for  pid=4717 comm="cvs" path="/home/cvs/CVSROOT/config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198793406.891:600): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bf90781c a2=776ff4 a3=90c6b60 items=0 ppid=4630 pid=4717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1198793406.922:601): user pid=4717 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198793406.925:602): user pid=4717 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198793463.616:603): user pid=5084 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198793463.619:604): user pid=5084 uid=0 auid=500 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198796461.488:605): user pid=23785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198796461.488:606): user pid=23785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198796461.489:607): login pid=23785 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198796461.507:608): user pid=23785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198796461.574:609): user pid=23785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198796461.576:610): user pid=23785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198800062.034:611): user pid=17079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198800062.046:612): user pid=17079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198800062.046:613): login pid=17079 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198800062.089:614): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198800062.398:615): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198800062.399:616): user pid=17079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198803661.783:617): user pid=7707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198803661.783:618): user pid=7707 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198803661.783:619): login pid=7707 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198803661.854:620): user pid=7707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198803662.205:621): user pid=7707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198803662.205:622): user pid=7707 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198807261.622:623): user pid=32646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198807261.634:624): user pid=32646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198807261.634:625): login pid=32646 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198807261.680:626): user pid=32646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198807261.970:627): user pid=32646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198807261.970:628): user pid=32646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198810863.411:629): user pid=23648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198810863.454:630): user pid=23648 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198810863.454:631): login pid=23648 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198810863.726:632): user pid=23648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198810864.400:633): user pid=23648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198810864.400:634): user pid=23648 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198813865.665:635): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9881 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1198814461.634:636): user pid=14238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198814461.662:637): user pid=14238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198814461.662:638): login pid=14238 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198814461.700:639): user pid=14238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198814462.064:640): user pid=14238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198814462.065:641): user pid=14238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198818062.200:642): user pid=5194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198818062.201:643): user pid=5194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198818062.201:644): login pid=5194 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198818062.223:645): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198818062.292:646): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198818062.292:647): user pid=5194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198821661.306:648): user pid=27447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198821661.307:649): user pid=27447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198821661.307:650): login pid=27447 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198821661.313:651): user pid=27447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198821661.318:652): user pid=27447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198821661.318:653): user pid=27447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198825261.332:654): user pid=20340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198825261.333:655): user pid=20340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198825261.333:656): login pid=20340 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198825261.342:657): user pid=20340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198825261.347:658): user pid=20340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198825261.347:659): user pid=20340 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198828861.362:660): user pid=11139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198828861.362:661): user pid=11139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198828861.362:662): login pid=11139 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198828861.369:663): user pid=11139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198828861.373:664): user pid=11139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198828861.373:665): user pid=11139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198832461.386:666): user pid=4395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198832461.386:667): user pid=4395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198832461.386:668): login pid=4395 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198832461.394:669): user pid=4395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198832461.398:670): user pid=4395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198832461.399:671): user pid=4395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198836061.470:672): user pid=28171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198836061.493:673): user pid=28171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198836061.493:674): login pid=28171 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198836061.499:675): user pid=28171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198836061.505:676): user pid=28171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198836061.505:677): user pid=28171 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198836121.511:678): user pid=28600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198836121.512:679): user pid=28600 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198836121.512:680): login pid=28600 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198836121.517:681): user pid=28600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198836732.716:682): user pid=28600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198836732.717:683): user pid=28600 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198839661.818:684): user pid=22410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198839661.819:685): user pid=22410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198839661.819:686): login pid=22410 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198839661.828:687): user pid=22410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198839661.855:688): user pid=22410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198839661.855:689): user pid=22410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198843261.870:690): user pid=15049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198843261.870:691): user pid=15049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198843261.870:692): login pid=15049 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198843261.878:693): user pid=15049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198843261.884:694): user pid=15049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198843261.884:695): user pid=15049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198846861.897:696): user pid=6492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198846861.898:697): user pid=6492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198846861.898:698): login pid=6492 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198846861.905:699): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198846861.910:700): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198846861.910:701): user pid=6492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198850461.960:702): user pid=29881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198850461.961:703): user pid=29881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198850461.961:704): login pid=29881 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198850461.968:705): user pid=29881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198850461.973:706): user pid=29881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198850461.973:707): user pid=29881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198854061.987:708): user pid=21408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198854061.988:709): user pid=21408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198854061.988:710): login pid=21408 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198854061.993:711): user pid=21408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198854061.998:712): user pid=21408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198854061.998:713): user pid=21408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198855197.756:714): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29171 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1198857661.039:715): user pid=11742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198857661.040:716): user pid=11742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198857661.040:717): login pid=11742 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198857661.047:718): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198857661.052:719): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198857661.053:720): user pid=11742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198861261.067:721): user pid=2195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198861261.068:722): user pid=2195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198861261.068:723): login pid=2195 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198861261.074:724): user pid=2195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198861261.080:725): user pid=2195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198861261.081:726): user pid=2195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198864861.094:727): user pid=25299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198864861.095:728): user pid=25299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198864861.095:729): login pid=25299 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198864861.101:730): user pid=25299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198864861.106:731): user pid=25299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198864861.106:732): user pid=25299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198868461.120:733): user pid=16149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198868461.121:734): user pid=16149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198868461.121:735): login pid=16149 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198868461.129:736): user pid=16149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198868461.134:737): user pid=16149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198868461.134:738): user pid=16149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198872061.148:739): user pid=8719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198872061.148:740): user pid=8719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198872061.148:741): login pid=8719 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198872061.153:742): user pid=8719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198872061.176:743): user pid=8719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198872061.176:744): user pid=8719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198875661.249:745): user pid=31880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198875661.250:746): user pid=31880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198875661.250:747): login pid=31880 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198875661.256:748): user pid=31880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198875661.263:749): user pid=31880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198875661.263:750): user pid=31880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198877206.162:751): user pid=9344 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198877225.488:752): user pid=9464 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198879240.857:753): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198879240.857:754): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198879240.975:755): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198879261.438:756): user pid=22341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198879261.439:757): user pid=22341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198879261.439:758): login pid=22341 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198879261.467:759): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198879261.498:760): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198879261.498:761): user pid=22341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198879269.959:762): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198879269.959:763): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198879269.966:764): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198879300.524:765): user pid=22396 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1198879303.948:766): avc:  denied  { read } for  pid=22696 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198879303.948:766): arch=40000003 syscall=5 success=yes exit=3 a0=808db78 a1=8000 a2=0 a3=8000 items=0 ppid=22555 pid=22696 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1198879303.948:767): avc:  denied  { ioctl } for  pid=22696 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198879303.948:767): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfaeb868 a3=bfaeb8a8 items=0 ppid=22555 pid=22696 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1198879303.948:768): avc:  denied  { getattr } for  pid=22696 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198879303.948:768): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=8071068 a2=776ff4 a3=80877e8 items=0 ppid=22555 pid=22696 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=USER_END msg=audit(1198879577.944:769): user pid=22144 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198882861.941:770): user pid=18922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198882861.941:771): user pid=18922 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198882861.942:772): login pid=18922 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198882861.972:773): user pid=18922 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198882862.148:774): user pid=18922 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198882862.148:775): user pid=18922 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1198883276.378:776): avc:  denied  { getattr } for  pid=21802 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883276.378:776): arch=40000003 syscall=195 success=yes exit=0 a0=b8f19c48 a1=bfe3bae0 a2=5e1ff4 a3=b8f19c48 items=0 ppid=2056 pid=21802 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198883276.394:777): avc:  denied  { read } for  pid=21802 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883276.394:777): arch=40000003 syscall=5 success=yes exit=4 a0=b8f19c48 a1=8000 a2=1b6 a3=b8f18db8 items=0 ppid=2056 pid=21802 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1198883276.400:778): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198883276.401:779): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198883279.585:780): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198883279.589:781): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198883279.664:782): user pid=21802 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198883279.665:783): login pid=21802 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198883279.666:784): user pid=21802 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198883279.667:785): user pid=21832 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198883279.856:786): user pid=21802 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198883279.856:787): user pid=21802 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=AVC msg=audit(1198883544.520:788): avc:  denied  { search } for  pid=23593 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1198883544.520:788): avc:  denied  { read } for  pid=23593 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1198883544.520:788): arch=40000003 syscall=195 success=yes exit=0 a0=b92e6948 a1=bf804e4c a2=52bff4 a3=8170 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883544.568:789): avc:  denied  { read } for  pid=23593 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883544.568:789): arch=40000003 syscall=5 success=yes exit=17 a0=b92e6cb0 a1=8000 a2=1b6 a3=8000 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883544.586:790): avc:  denied  { getattr } for  pid=23593 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883544.586:790): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bf804d1c a2=52bff4 a3=b92e6cd8 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883544.591:791): avc:  denied  { getattr } for  pid=23593 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1198883544.591:791): arch=40000003 syscall=196 success=yes exit=0 a0=b92ef298 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883544.591:792): avc:  denied  { getattr } for  pid=23593 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1198883544.591:792): arch=40000003 syscall=196 success=yes exit=0 a0=b92ef298 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883544.592:793): avc:  denied  { read } for  pid=23593 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1198883544.592:793): arch=40000003 syscall=5 success=yes exit=17 a0=b92e69c8 a1=98800 a2=52d120 a3=64 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883557.866:794): avc:  denied  { getattr } for  pid=23600 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883557.866:794): arch=40000003 syscall=196 success=yes exit=0 a0=bf801da8 a1=bf801cfc a2=52bff4 a3=171 items=0 ppid=23587 pid=23600 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198883937.002:795): avc:  denied  { read } for  pid=25965 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883937.002:795): arch=40000003 syscall=5 success=yes exit=3 a0=8266bf8 a1=8000 a2=0 a3=8000 items=0 ppid=23598 pid=25965 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1198883937.002:796): avc:  denied  { ioctl } for  pid=25965 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883937.002:796): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfc8cee8 a3=bfc8cf28 items=0 ppid=23598 pid=25965 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1198883937.002:797): avc:  denied  { getattr } for  pid=25965 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198883937.002:797): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=824a068 a2=776ff4 a3=8260808 items=0 ppid=23598 pid=25965 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1198884105.241:798): avc:  denied  { read } for  pid=23597 comm="httpd" name="m4v01167.mp4" dev=dm-0 ino=57835532 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1198884105.241:798): arch=40000003 syscall=5 success=yes exit=18 a0=b92f4210 a1=8000 a2=1b6 a3=8000 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1198886461.225:799): user pid=7890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198886461.251:800): user pid=7890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198886461.251:801): login pid=7890 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198886461.257:802): user pid=7890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198886461.265:803): user pid=7890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198886461.265:804): user pid=7890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198887378.604:805): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198887378.604:806): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198887378.696:807): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198887405.563:808): user pid=13690 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198890061.650:809): user pid=30701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198890061.650:810): user pid=30701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198890061.651:811): login pid=30701 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198890061.674:812): user pid=30701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198890061.763:813): user pid=30701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198890061.764:814): user pid=30701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198893661.870:815): user pid=20183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198893661.890:816): user pid=20183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198893661.890:817): login pid=20183 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198893661.919:818): user pid=20183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198893661.938:819): user pid=20183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198893661.938:820): user pid=20183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198897262.050:821): user pid=11252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198897262.050:822): user pid=11252 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198897262.051:823): login pid=11252 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198897262.072:824): user pid=11252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198897262.104:825): user pid=11252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198897262.104:826): user pid=11252 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198900861.205:827): user pid=3950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198900861.206:828): user pid=3950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198900861.206:829): login pid=3950 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198900861.221:830): user pid=3950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198900861.248:831): user pid=3950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198900861.248:832): user pid=3950 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198901417.500:833): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198901417.500:834): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198901417.611:835): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=MAC_POLICY_LOAD msg=audit(1198901611.970:836): policy loaded auid=500
>type=SYSCALL msg=audit(1198901611.970:836): arch=40000003 syscall=4 success=yes exit=3990099 a0=4 a1=b7ba6000 a2=3ce253 a3=bfe8b2b8 items=0 ppid=8022 pid=8206 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1198901614.667:837): user pid=1959 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_ROLE_CHANGE msg=audit(1198901732.277:838): user pid=8866 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198901734.102:839): user pid=8877 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198901751.152:840): user pid=8885 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198901753.381:841): user pid=8978 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198901755.218:842): user pid=8991 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1198901769.434:843): user pid=9002 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1198902451.426:844): user pid=7250 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198904461.917:845): user pid=25805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198904461.918:846): user pid=25805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198904461.918:847): login pid=25805 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198904461.950:848): user pid=25805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198904462.059:849): user pid=25805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198904462.059:850): user pid=25805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198908061.073:851): user pid=8481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198908061.074:852): user pid=8481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198908061.074:853): login pid=8481 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198908061.082:854): user pid=8481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198908061.087:855): user pid=8481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198908061.087:856): user pid=8481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198909152.211:857): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198909152.212:858): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198909152.296:859): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198909163.916:860): user pid=12677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198909239.976:861): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_ACCT msg=audit(1198909239.976:862): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_START msg=audit(1198909239.989:863): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_END msg=audit(1198909240.197:864): user pid=12955 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198909259.881:865): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_ACCT msg=audit(1198909259.881:866): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_START msg=audit(1198909259.889:867): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198909268.212:868): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198909268.288:869): user pid=22223 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1198909314.514:870): user pid=13044 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198909320.058:871): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198909320.059:872): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198909320.066:873): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198909359.609:874): user pid=13076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198909831.353:875): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_ACCT msg=audit(1198909831.356:876): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_START msg=audit(1198909831.368:877): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=CRED_ACQ msg=audit(1198909831.401:878): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=CRED_DISP msg=audit(1198909837.868:879): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=USER_END msg=audit(1198909837.868:880): user pid=13104 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/14 res=success)'
>type=ANOM_ABEND msg=audit(1198910936.826:881): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13155 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1198911661.102:882): user pid=13186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198911661.102:883): user pid=13186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198911661.102:884): login pid=13186 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198911661.109:885): user pid=13186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198911661.114:886): user pid=13186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198911661.114:887): user pid=13186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198915261.128:888): user pid=13318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198915261.128:889): user pid=13318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198915261.129:890): login pid=13318 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198915261.137:891): user pid=13318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198915261.142:892): user pid=13318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198915261.142:893): user pid=13318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198918861.156:894): user pid=13451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198918861.157:895): user pid=13451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198918861.157:896): login pid=13451 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198918861.164:897): user pid=13451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198918861.169:898): user pid=13451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198918861.169:899): user pid=13451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198922461.194:900): user pid=13583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198922461.194:901): user pid=13583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198922461.194:902): login pid=13583 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198922461.204:903): user pid=13583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198922461.209:904): user pid=13583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198922461.210:905): user pid=13583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198922521.217:906): user pid=13588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198922521.217:907): user pid=13588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198922521.217:908): login pid=13588 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198922521.225:909): user pid=13588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198923268.993:910): user pid=13588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198923268.994:911): user pid=13588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198926061.418:912): user pid=16683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198926061.430:913): user pid=16683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198926061.430:914): login pid=16683 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198926061.459:915): user pid=16683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198926061.502:916): user pid=16683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198926061.503:917): user pid=16683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198926493.803:918): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16701 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1198927499.954:919): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16758 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1198929661.589:920): user pid=17013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198929661.590:921): user pid=17013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198929661.590:922): login pid=17013 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198929661.598:923): user pid=17013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198929661.644:924): user pid=17013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198929661.645:925): user pid=17013 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198930061.661:926): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17121 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930088.421:927): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17179 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930088.975:928): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17199 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930089.369:929): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17218 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930089.764:930): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17237 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930133.444:931): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17319 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930133.802:932): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17339 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930134.174:933): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17358 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930134.543:934): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17377 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930201.426:935): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17425 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930209.323:936): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17439 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930252.877:937): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17456 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930308.773:938): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17472 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930390.361:939): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17888 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930519.384:940): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17909 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930529.254:941): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17924 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930616.033:942): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17958 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930824.224:943): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17987 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930906.561:944): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18005 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198930995.791:945): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18016 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198931089.010:946): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18023 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198931133.393:947): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18037 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198931316.904:948): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=12717 comm="dbus-launch" sig=6
>type=USER_ACCT msg=audit(1198933262.016:949): user pid=18268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198933262.016:950): user pid=18268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198933262.016:951): login pid=18268 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198933262.024:952): user pid=18268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198933262.107:953): user pid=18268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198933262.108:954): user pid=18268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198936861.318:955): user pid=18666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198936861.346:956): user pid=18666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198936861.346:957): login pid=18666 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198936861.376:958): user pid=18666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198936861.402:959): user pid=18666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198936861.402:960): user pid=18666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198940461.496:961): user pid=18800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198940461.497:962): user pid=18800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198940461.497:963): login pid=18800 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198940461.536:964): user pid=18800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198940461.585:965): user pid=18800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198940461.586:966): user pid=18800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198941820.629:967): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18954 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198942107.493:968): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19025 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198942428.599:969): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19059 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198942519.221:970): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19063 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198942554.242:971): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19066 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1198943186.778:972): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22833 comm="gs857" sig=11
>type=ANOM_ABEND msg=audit(1198943437.445:973): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28681 comm="gs857" sig=11
>type=USER_ACCT msg=audit(1198944061.990:974): user pid=2164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198944061.991:975): user pid=2164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198944061.991:976): login pid=2164 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198944062.043:977): user pid=2164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198944062.107:978): user pid=2164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198944062.107:979): user pid=2164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198944750.448:980): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2214 comm="gs857" sig=11
>type=ANOM_ABEND msg=audit(1198945157.810:981): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16026 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1198945970.498:982): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28893 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1198946552.412:983): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28916 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1198946696.569:984): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2988 comm="gs854" sig=11
>type=ANOM_ABEND msg=audit(1198946735.938:985): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2990 comm="gs857" sig=11
>type=ANOM_ABEND msg=audit(1198946750.933:986): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2992 comm="gs857" sig=11
>type=ANOM_ABEND msg=audit(1198946783.637:987): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2993 comm="gs857" sig=11
>type=ANOM_ABEND msg=audit(1198946795.373:988): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2994 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1198946834.220:989): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3000 comm="gs861" sig=11
>type=AVC msg=audit(1198947204.216:990): avc:  denied  { getattr } for  pid=3021 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198947204.216:990): arch=40000003 syscall=195 success=yes exit=0 a0=b8519c48 a1=bf9c1670 a2=5e1ff4 a3=b8519c48 items=0 ppid=2056 pid=3021 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198947204.262:991): avc:  denied  { read } for  pid=3021 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198947204.262:991): arch=40000003 syscall=5 success=yes exit=4 a0=b8519c48 a1=8000 a2=1b6 a3=b8518db8 items=0 ppid=2056 pid=3021 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1198947204.279:992): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198947204.280:993): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198947207.753:994): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198947207.788:995): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198947207.942:996): user pid=3021 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198947207.945:997): login pid=3021 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198947207.945:998): user pid=3021 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198947207.947:999): user pid=3025 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1198947209.873:1000): user pid=3021 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198947209.873:1001): user pid=3021 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198947661.349:1002): user pid=3085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198947661.350:1003): user pid=3085 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198947661.350:1004): login pid=3085 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198947661.356:1005): user pid=3085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198947661.451:1006): user pid=3085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198947661.452:1007): user pid=3085 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198947954.868:1008): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3099 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1198948060.059:1009): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3104 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1198948214.716:1010): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3112 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1198948243.266:1011): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3116 comm="gs861" sig=11
>type=AVC msg=audit(1198949753.254:1012): avc:  denied  { search } for  pid=23596 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1198949753.254:1012): avc:  denied  { read } for  pid=23596 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1198949753.254:1012): arch=40000003 syscall=195 success=yes exit=0 a0=b92ee968 a1=bf804e4c a2=52bff4 a3=8170 items=0 ppid=23587 pid=23596 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198949753.371:1013): avc:  denied  { read } for  pid=23596 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198949753.371:1013): arch=40000003 syscall=5 success=yes exit=17 a0=b92eecf0 a1=8000 a2=1b6 a3=8000 items=0 ppid=23587 pid=23596 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198949753.395:1014): avc:  denied  { getattr } for  pid=23596 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198949753.395:1014): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bf804d1c a2=52bff4 a3=b92eed18 items=0 ppid=23587 pid=23596 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198949753.480:1015): avc:  denied  { getattr } for  pid=23597 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1198949753.480:1015): arch=40000003 syscall=196 success=yes exit=0 a0=b92f62d0 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198949753.480:1016): avc:  denied  { getattr } for  pid=23597 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1198949753.480:1016): arch=40000003 syscall=196 success=yes exit=0 a0=b92f62d0 a1=bf804d4c a2=52bff4 a3=2008171 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198949753.508:1017): avc:  denied  { read } for  pid=23597 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1198949753.508:1017): arch=40000003 syscall=5 success=yes exit=17 a0=b92ee9e8 a1=98800 a2=bf802d58 a3=64 items=0 ppid=23587 pid=23597 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1198949764.987:1018): avc:  denied  { getattr } for  pid=23593 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1198949764.987:1018): arch=40000003 syscall=196 success=yes exit=0 a0=bf801da8 a1=bf801cfc a2=52bff4 a3=171 items=0 ppid=23587 pid=23593 auid=500 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1198951261.787:1019): user pid=3336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198951261.799:1020): user pid=3336 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198951261.799:1021): login pid=3336 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198951261.832:1022): user pid=3336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198951261.935:1023): user pid=3336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198951261.935:1024): user pid=3336 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198954862.038:1025): user pid=3468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198954862.038:1026): user pid=3468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198954862.039:1027): login pid=3468 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198954862.044:1028): user pid=3468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198954862.140:1029): user pid=3468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198954862.140:1030): user pid=3468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198956073.181:1031): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17906 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1198956079.965:1032): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17907 comm="gs.cur" sig=11
>type=USER_ACCT msg=audit(1198958461.628:1033): user pid=18210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198958461.628:1034): user pid=18210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198958461.628:1035): login pid=18210 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198958461.634:1036): user pid=18210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198958461.720:1037): user pid=18210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198958461.720:1038): user pid=18210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198962061.890:1039): user pid=18477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198962061.891:1040): user pid=18477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198962061.891:1041): login pid=18477 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198962061.906:1042): user pid=18477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198962061.928:1043): user pid=18477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198962061.928:1044): user pid=18477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198963119.475:1045): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1198963119.475:1046): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198963119.605:1047): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1198963195.746:1048): user pid=18677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1198963214.159:1049): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18746 comm="rarian-sk-get-c" sig=11
>type=USER_ACCT msg=audit(1198965661.378:1050): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198965661.379:1051): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198965661.379:1052): login pid=19508 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198965661.411:1053): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198965661.441:1054): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198965661.441:1055): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1198967334.707:1056): user pid=19577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1198968895.576:1057): avc:  denied  { getattr } for  pid=19698 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198968895.576:1057): arch=40000003 syscall=195 success=yes exit=0 a0=b9719c48 a1=bfef0b90 a2=5e1ff4 a3=b9719c48 items=0 ppid=2056 pid=19698 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1198968895.576:1058): avc:  denied  { read } for  pid=19698 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1198968895.576:1058): arch=40000003 syscall=5 success=yes exit=4 a0=b9719c48 a1=8000 a2=1b6 a3=b9718db8 items=0 ppid=2056 pid=19698 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1198968895.594:1059): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1198968895.596:1060): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1198968899.246:1061): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198968899.269:1062): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1198968899.349:1063): user pid=19698 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1198968899.352:1064): login pid=19698 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1198968899.352:1065): user pid=19698 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1198968899.354:1066): user pid=19702 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1198969262.267:1067): user pid=19805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198969262.269:1068): user pid=19805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198969262.269:1069): login pid=19805 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198969262.325:1070): user pid=19805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198969262.603:1071): user pid=19805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198969262.603:1072): user pid=19805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198969654.311:1073): user pid=19698 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1198969654.371:1074): user pid=19698 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=ANOM_ABEND msg=audit(1198969940.194:1075): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19868 comm="vmware" sig=6
>type=ANOM_ABEND msg=audit(1198969947.483:1076): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19901 comm="vmware" sig=6
>type=ANOM_ABEND msg=audit(1198969984.656:1077): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19935 comm="vmware" sig=6
>type=ANOM_ABEND msg=audit(1198969995.888:1078): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20009 comm="vmware" sig=6
>type=ANOM_ABEND msg=audit(1198970267.865:1079): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20057 comm="vmware" sig=6
>type=ANOM_ABEND msg=audit(1198970298.079:1080): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20090 comm="vmware" sig=6
>type=USER_END msg=audit(1198970367.174:1081): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1198970367.207:1082): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1198970372.648:1083): user pid=14547 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1198970373.903:1084): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20389 comm="firefox-bin" sig=11
>type=DAEMON_END msg=audit(1198970413.230:8918): auditd normal halt, sending auid=4294967295 pid=20707 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1797
>type=DAEMON_START msg=audit(1198970564.728:8977): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1943 res=success, auditd pid=1943
>type=CONFIG_CHANGE msg=audit(1198970564.827:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198970564.827:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1198970564.860:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198970564.860:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1198970586.370:8): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198970586.594:9): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1198970604.780:10): user pid=3000 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198970604.788:11): user pid=3000 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198970604.789:12): user pid=3000 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198970604.806:13): login pid=3000 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198970604.831:14): user pid=3000 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198970604.880:15): user pid=3000 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1198970604.882:16): user pid=3000 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1198970825.382:17): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1198970825.382:17): arch=40000003 syscall=5 per=400000 success=yes exit=175 a0=bfa794d2 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=4266 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1198971670.432:18): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4595 comm="nautilus" sig=11
>type=ANOM_ABEND msg=audit(1198971670.432:19): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4598 comm="nautilus" sig=11
>type=USER_ACCT msg=audit(1198972861.618:20): user pid=5004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198972861.637:21): user pid=5004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198972861.637:22): login pid=5004 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198972861.741:23): user pid=5004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198972861.919:24): user pid=5004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198972861.919:25): user pid=5004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1198974377.973:26): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1198974377.973:26): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=af a1=0 a2=bfa79abc a3=8908dc8 items=0 ppid=1 pid=4266 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1198976180.423:27): user pid=6037 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198976461.564:28): user pid=6121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198976461.564:29): user pid=6121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198976461.565:30): login pid=6121 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198976461.622:31): user pid=6121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198976461.677:32): user pid=6121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198976461.678:33): user pid=6121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1198977520.452:34): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6426 comm="nautilus" sig=6
>type=USER_ACCT msg=audit(1198980062.338:35): user pid=7168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198980062.365:36): user pid=7168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198980062.365:37): login pid=7168 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198980062.442:38): user pid=7168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198980062.647:39): user pid=7168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198980062.648:40): user pid=7168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198983662.641:41): user pid=8142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198983662.674:42): user pid=8142 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198983662.674:43): login pid=8142 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198983662.745:44): user pid=8142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198983662.966:45): user pid=8142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198983662.967:46): user pid=8142 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198987261.988:47): user pid=9117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198987262.015:48): user pid=9117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198987262.015:49): login pid=9117 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198987262.092:50): user pid=9117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198987262.272:51): user pid=9117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198987262.272:52): user pid=9117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198990861.665:53): user pid=10094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198990861.691:54): user pid=10094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198990861.692:55): login pid=10094 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198990861.768:56): user pid=10094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198990861.982:57): user pid=10094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198990861.982:58): user pid=10094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198994461.608:59): user pid=11065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198994461.659:60): user pid=11065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198994461.659:61): login pid=11065 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198994461.694:62): user pid=11065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198994461.866:63): user pid=11065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198994461.866:64): user pid=11065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1198998062.539:65): user pid=11932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1198998062.565:66): user pid=11932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1198998062.566:67): login pid=11932 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1198998062.663:68): user pid=11932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1198998062.847:69): user pid=11932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1198998062.847:70): user pid=11932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199001662.444:71): user pid=12910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199001662.495:72): user pid=12910 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199001662.496:73): login pid=12910 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199001662.531:74): user pid=12910 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199001662.702:75): user pid=12910 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199001662.703:76): user pid=12910 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199005228.432:77): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP_LaserJet_1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199005246.593:78): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199005246.593:79): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199005246.749:80): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199005261.918:81): user pid=13991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199005261.919:82): user pid=13991 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199005261.920:83): login pid=13991 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199005261.928:84): user pid=13991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199005262.027:85): user pid=13991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199005262.027:86): user pid=13991 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199005382.756:87): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP_LaserJet_1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1199005447.764:88): user pid=13964 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199005454.682:89): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199005454.682:90): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199005454.692:91): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1199005480.399:92): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=14140 tpid=2312 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1199005480.483:93): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.49 spid=2312 tpid=14140 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199005650.294:94): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199005650.326:95): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199005650.330:96): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1199005747.924:97): user pid=14074 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1199006817.942:98): avc:  denied  { execmod } for  pid=14632 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1199006817.942:98): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bff45da0 items=0 ppid=4335 pid=14632 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199008861.487:99): user pid=15302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199008861.515:100): user pid=15302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199008861.515:101): login pid=15302 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199008861.561:102): user pid=15302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199008861.722:103): user pid=15302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199008861.722:104): user pid=15302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199008921.729:105): user pid=15323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199008921.730:106): user pid=15323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199008921.730:107): login pid=15323 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199008921.737:108): user pid=15323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199009523.439:109): user pid=15323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199009523.440:110): user pid=15323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199010121.698:111): user pid=16641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199010121.699:112): user pid=16641 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199010121.699:113): login pid=16641 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199010121.739:114): user pid=16641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199010283.110:115): user pid=16733 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199010909.469:116): user pid=16641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199010909.510:117): user pid=16641 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199012462.298:118): user pid=22036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199012462.323:119): user pid=22036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199012462.323:120): login pid=22036 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199012462.424:121): user pid=22036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199012463.292:122): user pid=22036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199012463.292:123): user pid=22036 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199016071.512:124): user pid=22735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199016072.877:125): user pid=22735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199016074.131:126): login pid=22735 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199016080.674:127): user pid=22735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199016102.822:128): user pid=22735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199016103.813:129): user pid=22735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=DAEMON_START msg=audit(1199016864.336:763): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2018 res=success, auditd pid=2018
>type=CONFIG_CHANGE msg=audit(1199016864.436:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199016864.436:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199016864.461:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199016864.461:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1199016880.315:8): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199016880.557:9): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199016880.601:10): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199017119.334:11): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199017119.342:12): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1199017119.343:13): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1199017119.360:14): login pid=3099 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1199017119.384:15): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199017119.434:16): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1199017119.436:17): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199018530.304:18): user pid=4684 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199019662.016:19): user pid=5368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199019662.017:20): user pid=5368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199019662.017:21): login pid=5368 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199019662.045:22): user pid=5368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199019662.076:23): user pid=5368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199019662.076:24): user pid=5368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199020366.259:25): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5604 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199020501.086:26): user pid=5654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199020501.086:27): user pid=5654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199020501.086:28): login pid=5654 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199020501.091:29): user pid=5654 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199023261.662:30): user pid=6421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199023261.662:31): user pid=6421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199023261.662:32): login pid=6421 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199023261.708:33): user pid=6421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199023261.793:34): user pid=6421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199023261.793:35): user pid=6421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199026861.862:36): user pid=7400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199026861.863:37): user pid=7400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199026861.863:38): login pid=7400 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199026861.870:39): user pid=7400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199026861.875:40): user pid=7400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199026861.875:41): user pid=7400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199030461.890:42): user pid=8493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199030461.890:43): user pid=8493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199030461.891:44): login pid=8493 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199030461.898:45): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199030461.904:46): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199030461.904:47): user pid=8493 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199034061.920:48): user pid=9482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199034061.920:49): user pid=9482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199034061.920:50): login pid=9482 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199034061.927:51): user pid=9482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199034061.931:52): user pid=9482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199034061.931:53): user pid=9482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199035288.430:54): avc:  denied  { search } for  pid=2667 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1199035288.430:54): avc:  denied  { read } for  pid=2667 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=AVC msg=audit(1199035288.430:54): avc:  denied  { getattr } for  pid=2667 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199035288.430:54): arch=40000003 syscall=195 success=yes exit=0 a0=b8609430 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2667 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199035288.509:55): avc:  denied  { read } for  pid=2667 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199035288.509:55): arch=40000003 syscall=5 success=yes exit=17 a0=b86097d0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2568 pid=2667 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199037077.478:56): avc:  denied  { execmod } for  pid=10346 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1199037077.478:56): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bfc091f0 items=0 ppid=4241 pid=10346 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199037661.982:57): user pid=10684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199037661.983:58): user pid=10684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199037661.983:59): login pid=10684 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199037661.989:60): user pid=10684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199037662.035:61): user pid=10684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199037662.035:62): user pid=10684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199038595.808:63): avc:  denied  { read } for  pid=2671 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1199038595.808:63): arch=40000003 syscall=195 success=yes exit=0 a0=b860b4e8 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2671 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199038896.127:64): avc:  denied  { search } for  pid=2672 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199038896.127:64): arch=40000003 syscall=195 success=yes exit=0 a0=b860b4e8 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2672 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1199041107.754:65): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=11753 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199041261.380:66): user pid=11797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199041261.380:67): user pid=11797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199041261.381:68): login pid=11797 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199041261.387:69): user pid=11797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199041261.463:70): user pid=11797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199041261.463:71): user pid=11797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199041298.007:72): avc:  denied  { getattr } for  pid=2672 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199041298.007:72): arch=40000003 syscall=195 success=yes exit=0 a0=b860d4f0 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2672 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199041298.007:73): avc:  denied  { read } for  pid=2672 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199041298.007:73): arch=40000003 syscall=5 success=yes exit=17 a0=b860d890 a1=8000 a2=1b6 a3=8000 items=0 ppid=2568 pid=2672 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1199042407.427:74): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=12111 comm="f-spot" sig=6
>type=USER_AUTH msg=audit(1199042819.042:75): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199042819.042:76): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199042819.314:77): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199042849.866:78): user pid=25120 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1199043145.552:79): avc:  denied  { search } for  pid=2670 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1199043145.552:79): avc:  denied  { read } for  pid=2670 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=AVC msg=audit(1199043145.552:79): avc:  denied  { getattr } for  pid=2670 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199043145.552:79): arch=40000003 syscall=195 success=yes exit=0 a0=b86094e0 a1=bfcfa44c a2=52bff4 a3=8170 items=0 ppid=2568 pid=2670 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199043145.552:80): avc:  denied  { read } for  pid=2670 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199043145.552:80): arch=40000003 syscall=5 success=yes exit=17 a0=b8609880 a1=8000 a2=1b6 a3=8000 items=0 ppid=2568 pid=2670 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199044861.508:81): user pid=26903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199044861.509:82): user pid=26903 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199044861.509:83): login pid=26903 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199044861.516:84): user pid=26903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199044861.521:85): user pid=26903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199044861.522:86): user pid=26903 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199045464.685:87): avc:  denied  { getattr } for  pid=27265 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199045464.685:87): arch=40000003 syscall=195 success=yes exit=0 a0=b8b19c38 a1=bf940de0 a2=5e1ff4 a3=b8b19c38 items=0 ppid=2502 pid=27265 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199045464.705:88): avc:  denied  { read } for  pid=27265 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199045464.705:88): arch=40000003 syscall=5 success=yes exit=4 a0=b8b19c38 a1=8000 a2=1b6 a3=b8b18da8 items=0 ppid=2502 pid=27265 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1199045464.731:89): user pid=27265 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1199045464.810:90): user pid=27265 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=LOGIN msg=audit(1199045464.812:91): login pid=27265 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199045464.812:92): user pid=27265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1199045464.814:93): user pid=27268 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1199045464.978:94): user pid=27265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_END msg=audit(1199045464.979:95): user pid=27265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=AVC msg=audit(1199048396.704:96): avc:  denied  { read } for  pid=31680 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199048396.704:96): arch=40000003 syscall=5 success=yes exit=3 a0=8372bf8 a1=8000 a2=0 a3=8000 items=0 ppid=2671 pid=31680 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199048396.742:97): avc:  denied  { ioctl } for  pid=31680 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199048396.742:97): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfadd0c8 a3=bfadd108 items=0 ppid=2671 pid=31680 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199048396.742:98): avc:  denied  { getattr } for  pid=31680 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199048396.742:98): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=8356068 a2=776ff4 a3=836c808 items=0 ppid=2671 pid=31680 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199048461.566:99): user pid=31697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199048461.567:100): user pid=31697 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199048461.567:101): login pid=31697 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199048461.574:102): user pid=31697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199048461.592:103): user pid=31697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199048461.592:104): user pid=31697 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199048636.006:105): avc:  denied  { read } for  pid=31752 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199048636.006:105): arch=40000003 syscall=5 success=yes exit=3 a0=937bbf8 a1=8000 a2=0 a3=8000 items=0 ppid=2673 pid=31752 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199048636.006:106): avc:  denied  { ioctl } for  pid=31752 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199048636.006:106): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfc2e188 a3=bfc2e1c8 items=0 ppid=2673 pid=31752 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199048636.006:107): avc:  denied  { getattr } for  pid=31752 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199048636.006:107): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=935f068 a2=776ff4 a3=9375808 items=0 ppid=2673 pid=31752 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1199049292.345:108): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31952 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199052061.672:109): user pid=32708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199052061.673:110): user pid=32708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199052061.673:111): login pid=32708 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199052061.687:112): user pid=32708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199052061.722:113): user pid=32708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199052061.722:114): user pid=32708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199055661.736:115): user pid=1257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199055661.736:116): user pid=1257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199055661.737:117): login pid=1257 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199055661.746:118): user pid=1257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199055661.750:119): user pid=1257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199055661.750:120): user pid=1257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199056198.610:121): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199056198.610:122): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199056198.718:123): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1199056206.057:124): user pid=2196 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=1521 tpid=2468 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1199056206.123:125): user pid=2196 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.46 spid=2468 tpid=1521 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199056579.719:126): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199056579.723:127): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199056579.759:128): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199056673.868:129): avc:  denied  { getattr } for  pid=1664 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199056673.868:129): arch=40000003 syscall=229 success=yes exit=33 a0=41103578 a1=402a6723 a2=41105ba0 a3=ff items=0 ppid=1 pid=1664 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199056673.869:130): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199056673.883:131): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199056673.887:132): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199056752.248:133): avc:  denied  { write } for  pid=1664 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199056752.248:133): arch=40000003 syscall=5 success=yes exit=19 a0=41102f6d a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=1664 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199056752.276:134): avc:  denied  { ioctl } for  pid=1767 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199056752.276:134): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfb0c908 a3=bfb0c948 items=0 ppid=1664 pid=1767 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1199059261.765:135): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199059261.766:136): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199059261.767:137): login pid=2683 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199059261.776:138): user pid=2683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199059261.781:139): user pid=2683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199059261.782:140): user pid=2683 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199062861.808:141): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199062861.808:142): user pid=3750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199062861.808:143): login pid=3750 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199062861.816:144): user pid=3750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199062861.822:145): user pid=3750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199062861.822:146): user pid=3750 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199066461.835:147): user pid=4766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199066461.836:148): user pid=4766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199066461.836:149): login pid=4766 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199066461.843:150): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199066461.848:151): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199066461.848:152): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199070061.862:153): user pid=5925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199070061.862:154): user pid=5925 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199070061.862:155): login pid=5925 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199070061.868:156): user pid=5925 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199070061.872:157): user pid=5925 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199070061.872:158): user pid=5925 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199073661.921:159): user pid=6888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199073661.921:160): user pid=6888 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199073661.921:161): login pid=6888 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199073661.928:162): user pid=6888 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199073661.933:163): user pid=6888 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199073661.933:164): user pid=6888 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199075123.769:165): user pid=1444 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1199076963.603:166): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8187 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199077262.226:167): user pid=8270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199077262.226:168): user pid=8270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199077262.227:169): login pid=8270 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199077262.234:170): user pid=8270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199077262.289:171): user pid=8270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199077262.290:172): user pid=8270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199078380.446:173): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8596 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199080861.303:174): user pid=9258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199080861.304:175): user pid=9258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199080861.304:176): login pid=9258 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199080861.310:177): user pid=9258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199080861.314:178): user pid=9258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199080861.314:179): user pid=9258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199084461.327:180): user pid=10228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199084461.327:181): user pid=10228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199084461.327:182): login pid=10228 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199084461.333:183): user pid=10228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199084461.337:184): user pid=10228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199084461.338:185): user pid=10228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199084987.499:186): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10374 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199088061.350:187): user pid=11235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199088061.350:188): user pid=11235 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199088061.351:189): login pid=11235 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199088061.357:190): user pid=11235 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199088061.362:191): user pid=11235 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199088061.362:192): user pid=11235 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199091661.374:193): user pid=12225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199091661.375:194): user pid=12225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199091661.375:195): login pid=12225 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199091661.383:196): user pid=12225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199091661.388:197): user pid=12225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199091661.388:198): user pid=12225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199095261.425:199): user pid=13213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199095261.425:200): user pid=13213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199095261.425:201): login pid=13213 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199095261.432:202): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199095261.436:203): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199095261.437:204): user pid=13213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199095321.443:205): user pid=13230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199095321.443:206): user pid=13230 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199095321.443:207): login pid=13230 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199095321.452:208): user pid=13230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199095868.693:209): user pid=13230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199095868.693:210): user pid=13230 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199098861.939:211): user pid=16560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199098861.940:212): user pid=16560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199098861.940:213): login pid=16560 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199098861.980:214): user pid=16560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199098862.064:215): user pid=16560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199098862.064:216): user pid=16560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199102461.158:217): user pid=17719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199102461.159:218): user pid=17719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199102461.159:219): login pid=17719 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199102461.166:220): user pid=17719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199102461.226:221): user pid=17719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199102461.227:222): user pid=17719 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199104454.059:223): user pid=18293 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104521.355:224): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104521.508:225): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104521.513:226): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.169:227): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.173:228): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.177:229): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.184:230): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.190:231): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.194:232): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.198:233): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.203:234): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.207:235): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.211:236): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.215:237): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.220:238): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.225:239): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.229:240): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.233:241): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.238:242): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104533.242:243): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199104572.942:244): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199105804.076:245): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199105804.076:246): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199105804.169:247): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199105998.408:248): user pid=18817 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1199106020.204:249): avc:  denied  { execmod } for  pid=18895 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1199106020.204:249): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bfb50930 items=0 ppid=4241 pid=18895 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199106061.311:250): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199106061.311:251): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199106061.312:252): login pid=18969 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199106061.319:253): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199106061.371:254): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199106061.372:255): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199106901.851:256): user pid=19290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199106901.852:257): user pid=19290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199106901.852:258): login pid=19290 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199106901.921:259): user pid=19290 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199109661.686:260): user pid=20053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199109661.713:261): user pid=20053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199109661.714:262): login pid=20053 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199109661.790:263): user pid=20053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199109661.989:264): user pid=20053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199109661.990:265): user pid=20053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199113262.002:266): user pid=21035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199113262.003:267): user pid=21035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199113262.003:268): login pid=21035 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199113262.011:269): user pid=21035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199113262.016:270): user pid=21035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199113262.017:271): user pid=21035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199113743.708:272): avc:  denied  { execmod } for  pid=21325 comm="npviewer.bin" path="/usr/lib/mozilla/plugins/nppdf.so" dev=dm-0 ino=48892366 scontext=system_u:system_r:unconfined_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1199113743.708:272): arch=40000003 syscall=125 success=yes exit=0 a0=7dd000 a1=108000 a2=5 a3=bfbdb1c0 items=0 ppid=4241 pid=21325 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1199113871.413:273): policy loaded auid=500
>type=SYSCALL msg=audit(1199113871.413:273): arch=40000003 syscall=4 success=yes exit=3990099 a0=4 a1=b7b3d000 a2=3ce253 a3=bfed0bc8 items=0 ppid=21424 pid=21428 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts16 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1199113871.647:274): user pid=2196 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_ACCT msg=audit(1199116861.031:275): user pid=22474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199116861.032:276): user pid=22474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199116861.032:277): login pid=22474 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199116861.041:278): user pid=22474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199116861.047:279): user pid=22474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199116861.048:280): user pid=22474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199120461.063:281): user pid=23710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199120461.064:282): user pid=23710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199120461.064:283): login pid=23710 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199120461.071:284): user pid=23710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199120461.075:285): user pid=23710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199120461.076:286): user pid=23710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199124061.089:287): user pid=24745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199124061.090:288): user pid=24745 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199124061.090:289): login pid=24745 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199124061.097:290): user pid=24745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199124061.102:291): user pid=24745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199124061.102:292): user pid=24745 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199127661.115:293): user pid=25790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199127661.116:294): user pid=25790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199127661.116:295): login pid=25790 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199127661.124:296): user pid=25790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199127661.128:297): user pid=25790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199127661.128:298): user pid=25790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199131261.162:299): user pid=26921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199131261.163:300): user pid=26921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199131261.163:301): login pid=26921 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199131261.168:302): user pid=26921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199131261.186:303): user pid=26921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199131261.187:304): user pid=26921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199134861.212:305): user pid=28215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199134861.213:306): user pid=28215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199134861.213:307): login pid=28215 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199134861.221:308): user pid=28215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199134861.226:309): user pid=28215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199134861.226:310): user pid=28215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199138461.239:311): user pid=29221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199138461.240:312): user pid=29221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199138461.240:313): login pid=29221 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199138461.248:314): user pid=29221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199138461.253:315): user pid=29221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199138461.253:316): user pid=29221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199140008.259:317): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29739 comm="monitor" sig=11
>type=USER_ACCT msg=audit(1199142061.347:318): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199142061.347:319): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199142061.348:320): login pid=30380 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199142061.356:321): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199142061.362:322): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199142061.362:323): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199145661.424:324): user pid=31369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199145661.425:325): user pid=31369 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199145661.425:326): login pid=31369 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199145661.432:327): user pid=31369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199145661.437:328): user pid=31369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199145661.438:329): user pid=31369 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199149261.451:330): user pid=32386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199149261.451:331): user pid=32386 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199149261.452:332): login pid=32386 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199149261.459:333): user pid=32386 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199149261.464:334): user pid=32386 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199149261.464:335): user pid=32386 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199152861.477:336): user pid=909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199152861.478:337): user pid=909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199152861.478:338): login pid=909 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199152861.484:339): user pid=909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199152861.489:340): user pid=909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199152861.489:341): user pid=909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199156461.503:342): user pid=2044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199156461.504:343): user pid=2044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199156461.504:344): login pid=2044 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199156461.512:345): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199156461.518:346): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199156461.518:347): user pid=2044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199160061.551:348): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199160061.552:349): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199160061.552:350): login pid=3163 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199160061.560:351): user pid=3163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199160061.565:352): user pid=3163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199160061.566:353): user pid=3163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199163661.579:354): user pid=4203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199163661.579:355): user pid=4203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199163661.579:356): login pid=4203 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199163661.587:357): user pid=4203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199163661.591:358): user pid=4203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199163661.591:359): user pid=4203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199164881.769:360): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4542 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199167261.604:361): user pid=5223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199167261.604:362): user pid=5223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199167261.605:363): login pid=5223 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199167261.611:364): user pid=5223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199167261.615:365): user pid=5223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199167261.615:366): user pid=5223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199168401.624:367): user pid=5533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199168401.624:368): user pid=5533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199168401.625:369): login pid=5533 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199168401.630:370): user pid=5533 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199170861.761:371): user pid=6245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199170861.761:372): user pid=6245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199170861.762:373): login pid=6245 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199170861.768:374): user pid=6245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199170861.772:375): user pid=6245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199170861.773:376): user pid=6245 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199172001.781:377): user pid=6558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199172001.782:378): user pid=6558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199172001.782:379): login pid=6558 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199172001.790:380): user pid=6558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199174461.786:381): user pid=7233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199174461.787:382): user pid=7233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199174461.787:383): login pid=7233 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199174461.792:384): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199174461.796:385): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199174461.796:386): user pid=7233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199178061.811:387): user pid=8351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199178061.812:388): user pid=8351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199178061.812:389): login pid=8351 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199178061.818:390): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199178061.823:391): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199178061.824:392): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199181114.888:393): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9348 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199181661.838:394): user pid=9633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199181661.838:395): user pid=9633 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199181661.839:396): login pid=9633 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199181661.847:397): user pid=9633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199181661.851:398): user pid=9633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199181661.851:399): user pid=9633 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199181721.857:400): user pid=9740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199181721.857:401): user pid=9740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199181721.857:402): login pid=9740 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199181721.863:403): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199182225.615:404): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199182225.616:405): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199184121.706:406): user pid=11651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199184121.707:407): user pid=11651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199184121.707:408): login pid=11651 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199184121.711:409): user pid=11651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199184556.856:410): user pid=11651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199184556.857:411): user pid=11651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199185007.894:412): user pid=6558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199185007.895:413): user pid=6558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199185261.902:414): user pid=11983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199185261.902:415): user pid=11983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199185261.902:416): login pid=11983 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199185261.909:417): user pid=11983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199185261.914:418): user pid=11983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199185261.914:419): user pid=11983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199188861.927:420): user pid=12967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199188861.928:421): user pid=12967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199188861.928:422): login pid=12967 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199188861.935:423): user pid=12967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199188861.940:424): user pid=12967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199188861.940:425): user pid=12967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199192461.953:426): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199192461.953:427): user pid=13942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199192461.953:428): login pid=13942 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199192461.963:429): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199192461.968:430): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199192461.968:431): user pid=13942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199193301.977:432): user pid=14184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199193301.978:433): user pid=14184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199193301.978:434): login pid=14184 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199193301.986:435): user pid=14184 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199196062.058:436): user pid=14969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199196062.058:437): user pid=14969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199196062.058:438): login pid=14969 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199196062.086:439): user pid=14969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199196062.187:440): user pid=14969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199196062.187:441): user pid=14969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199199661.295:442): user pid=16063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199199661.296:443): user pid=16063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199199661.296:444): login pid=16063 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199199661.317:445): user pid=16063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199199661.340:446): user pid=16063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199199661.341:447): user pid=16063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199200883.070:448): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16436 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199200902.828:449): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16455 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199201112.240:450): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16567 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199201150.487:451): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16598 comm="gs" sig=11
>type=USER_ACCT msg=audit(1199203261.354:452): user pid=17221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199203261.354:453): user pid=17221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199203261.355:454): login pid=17221 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199203261.364:455): user pid=17221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199203261.369:456): user pid=17221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199203261.369:457): user pid=17221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199204725.847:458): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17652 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1199204921.178:459): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17735 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199205076.636:460): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17801 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199205082.475:461): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17823 comm="gs" sig=11
>type=USER_AUTH msg=audit(1199205179.918:462): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_ACCT msg=audit(1199205179.921:463): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_START msg=audit(1199205180.087:464): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_ACQ msg=audit(1199205180.120:465): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=ANOM_ABEND msg=audit(1199205329.439:466): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17992 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199205349.600:467): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18021 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199205758.716:468): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18216 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199205820.253:469): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18260 comm="gs" sig=11
>type=USER_ACCT msg=audit(1199206861.382:470): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199206861.383:471): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199206861.383:472): login pid=18558 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199206861.391:473): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199206861.395:474): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199206861.395:475): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199210461.489:476): user pid=19687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199210461.491:477): user pid=19687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199210461.491:478): login pid=19687 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199210461.498:479): user pid=19687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199210461.530:480): user pid=19687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199210461.530:481): user pid=19687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199214061.543:482): user pid=20783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199214061.543:483): user pid=20783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199214061.544:484): login pid=20783 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199214061.553:485): user pid=20783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199214061.557:486): user pid=20783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199214061.557:487): user pid=20783 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199217661.570:488): user pid=21776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199217661.570:489): user pid=21776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199217661.570:490): login pid=21776 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199217661.578:491): user pid=21776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199217661.595:492): user pid=21776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199217661.596:493): user pid=21776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199221261.608:494): user pid=22748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199221261.609:495): user pid=22748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199221261.609:496): login pid=22748 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199221261.614:497): user pid=22748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199221261.618:498): user pid=22748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199221261.619:499): user pid=22748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199222923.798:500): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23354 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199224861.633:501): user pid=23937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199224861.633:502): user pid=23937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199224861.634:503): login pid=23937 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199224861.641:504): user pid=23937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199224861.646:505): user pid=23937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199224861.647:506): user pid=23937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199226469.550:507): user pid=24452 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1199228461.662:508): user pid=25062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199228461.663:509): user pid=25062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199228461.663:510): login pid=25062 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199228461.671:511): user pid=25062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199228461.676:512): user pid=25062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199228461.676:513): user pid=25062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199229006.231:514): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199229006.231:515): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199229006.270:516): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199229039.745:517): user pid=25253 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199232061.690:518): user pid=26184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199232061.691:519): user pid=26184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199232061.691:520): login pid=26184 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199232061.700:521): user pid=26184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199232061.705:522): user pid=26184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199232061.705:523): user pid=26184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199235661.719:524): user pid=27219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199235661.720:525): user pid=27219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199235661.720:526): login pid=27219 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199235661.726:527): user pid=27219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199235661.730:528): user pid=27219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199235661.730:529): user pid=27219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199239261.744:530): user pid=28272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199239261.745:531): user pid=28272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199239261.745:532): login pid=28272 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199239261.753:533): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199239261.759:534): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199239261.759:535): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199242861.772:536): user pid=29266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199242861.773:537): user pid=29266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199242861.773:538): login pid=29266 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199242861.781:539): user pid=29266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199242861.786:540): user pid=29266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199242861.786:541): user pid=29266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199246461.800:542): user pid=30239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199246461.801:543): user pid=30239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199246461.801:544): login pid=30239 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199246461.810:545): user pid=30239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199246461.815:546): user pid=30239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199246461.815:547): user pid=30239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199250061.829:548): user pid=31767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199250061.830:549): user pid=31767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199250061.830:550): login pid=31767 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199250061.838:551): user pid=31767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199250061.843:552): user pid=31767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199250061.843:553): user pid=31767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199251716.708:554): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=1457 comm="dbus-launch" sig=6
>type=CRED_DISP msg=audit(1199251773.911:555): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1199251774.090:556): user pid=17865 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1199251776.059:557): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1199251776.076:558): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1199251836.012:559): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199251836.018:560): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1199251836.018:561): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1199251836.019:562): login pid=3099 uid=0 old auid=500 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1199251836.083:563): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199251836.145:564): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1199251836.146:565): user pid=3099 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199253661.932:566): user pid=1685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199253661.933:567): user pid=1685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199253661.933:568): login pid=1685 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199253661.941:569): user pid=1685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199253661.948:570): user pid=1685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199253661.948:571): user pid=1685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199257261.962:572): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199257261.962:573): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199257261.962:574): login pid=2752 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199257261.968:575): user pid=2752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199257261.973:576): user pid=2752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199257261.974:577): user pid=2752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199260861.987:578): user pid=3725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199260861.987:579): user pid=3725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199260861.988:580): login pid=3725 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199260861.993:581): user pid=3725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199260861.997:582): user pid=3725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199260861.997:583): user pid=3725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199264461.011:584): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199264461.011:585): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199264461.011:586): login pid=4674 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199264461.019:587): user pid=4674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199264461.024:588): user pid=4674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199264461.024:589): user pid=4674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199268061.049:590): user pid=5632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199268061.049:591): user pid=5632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199268061.050:592): login pid=5632 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199268061.056:593): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199268061.061:594): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199268061.061:595): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199268121.067:596): user pid=5653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199268121.068:597): user pid=5653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199268121.068:598): login pid=5653 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199268121.076:599): user pid=5653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199268618.265:600): user pid=5653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199268618.265:601): user pid=5653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199271661.279:602): user pid=7113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199271661.280:603): user pid=7113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199271661.280:604): login pid=7113 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199271661.288:605): user pid=7113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199271661.293:606): user pid=7113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199271661.293:607): user pid=7113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199272458.808:608): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199272458.808:609): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199272459.014:610): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272478.949:611): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.038:612): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.101:613): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.166:614): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.174:615): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.180:616): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.186:617): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.191:618): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.198:619): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.202:620): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.208:621): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.214:622): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.219:623): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.225:624): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.230:625): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.234:626): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272479.240:627): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199272491.842:628): user pid=1664 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12  banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1199272501.277:629): user pid=7468 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199272736.715:630): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199272736.715:631): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199272736.962:632): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199272753.520:633): user pid=7676 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199275267.874:634): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199275267.950:635): user pid=8427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199275267.968:636): login pid=8427 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199275277.326:637): user pid=8427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199275295.497:638): user pid=8427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199275296.172:639): user pid=8427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=DAEMON_START msg=audit(1199275385.528:9938): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2013 res=success, auditd pid=2013
>type=CONFIG_CHANGE msg=audit(1199275385.627:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199275385.627:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199275385.661:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199275385.661:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1199275408.454:8): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199275408.611:9): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199275408.728:10): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199275408.746:11): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199275408.752:12): avc:  denied  { getattr } for  pid=2847 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199275408.752:12): arch=40000003 syscall=229 success=yes exit=33 a0=b9264588 a1=32d723 a2=b9263ca0 a3=ff items=0 ppid=2844 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199275408.797:13): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199275408.800:14): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199275409.003:15): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199275429.091:16): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199275429.099:17): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1199275429.100:18): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1199275429.114:19): login pid=3185 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1199275429.140:20): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199275429.188:21): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1199275429.190:22): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1199275557.567:23): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4305 comm="rarian-sk-get-c" sig=11
>type=USER_ACCT msg=audit(1199278861.299:24): user pid=5390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199278861.300:25): user pid=5390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199278861.300:26): login pid=5390 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199278861.307:27): user pid=5390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199278861.353:28): user pid=5390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199278861.353:29): user pid=5390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199279701.362:30): user pid=5631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199279701.363:31): user pid=5631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199279701.363:32): login pid=5631 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199279701.370:33): user pid=5631 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199282461.838:34): user pid=6389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199282461.866:35): user pid=6389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199282461.866:36): login pid=6389 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199282461.901:37): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199282462.019:38): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199282462.019:39): user pid=6389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199286061.071:40): user pid=7418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199286061.072:41): user pid=7418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199286061.072:42): login pid=7418 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199286061.078:43): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199286061.081:44): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199286061.082:45): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199286321.251:46): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199286321.254:47): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1199286321.396:48): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1199286321.429:49): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1199286326.409:50): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1199286326.411:51): user pid=7499 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199289661.271:52): user pid=8913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199289661.272:53): user pid=8913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199289661.272:54): login pid=8913 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199289661.292:55): user pid=8913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199289661.340:56): user pid=8913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199289661.341:57): user pid=8913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199292855.368:58): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10395 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199293261.454:59): user pid=10514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199293261.455:60): user pid=10514 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199293261.455:61): login pid=10514 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199293261.486:62): user pid=10514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199293261.491:63): user pid=10514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199293261.491:64): user pid=10514 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199296861.598:65): user pid=11546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199296861.599:66): user pid=11546 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199296861.599:67): login pid=11546 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199296861.606:68): user pid=11546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199296861.658:69): user pid=11546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199296861.658:70): user pid=11546 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199300461.766:71): user pid=12542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199300461.767:72): user pid=12542 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199300461.767:73): login pid=12542 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199300461.798:74): user pid=12542 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199300461.804:75): user pid=12542 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199300461.804:76): user pid=12542 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199304061.855:77): user pid=13508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199304061.856:78): user pid=13508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199304061.856:79): login pid=13508 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199304061.864:80): user pid=13508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199304061.902:81): user pid=13508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199304061.902:82): user pid=13508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199307661.916:83): user pid=14485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199307661.917:84): user pid=14485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199307661.917:85): login pid=14485 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199307661.926:86): user pid=14485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199307661.931:87): user pid=14485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199307661.931:88): user pid=14485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199311261.965:89): user pid=15501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199311261.965:90): user pid=15501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199311261.965:91): login pid=15501 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199311261.972:92): user pid=15501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199311261.977:93): user pid=15501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199311261.977:94): user pid=15501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199311470.278:95): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1199311470.298:96): user pid=3185 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1199311472.826:97): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3106 comm="gdm-binary" sig=11
>type=DAEMON_END msg=audit(1199311492.670:9939): auditd normal halt, sending auid=4294967295 pid=16201 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2013
>type=DAEMON_START msg=audit(1199311845.269:7757): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1977 res=success, auditd pid=1977
>type=CONFIG_CHANGE msg=audit(1199311845.369:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199311845.369:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199311845.402:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199311845.402:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.056:8): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.280:9): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.353:10): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.358:11): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199311868.397:12): avc:  denied  { getattr } for  pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199311868.397:12): arch=40000003 syscall=229 success=yes exit=33 a0=b9156588 a1=32d723 a2=b9155ca0 a3=ff items=0 ppid=2810 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.471:13): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.485:14): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199311868.688:15): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199311888.692:16): user pid=3164 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199311888.700:17): user pid=3164 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1199311888.701:18): user pid=3164 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1199311888.724:19): login pid=3164 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1199311888.749:20): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199311888.799:21): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1199311888.800:22): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1199314861.842:23): user pid=5078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199314861.843:24): user pid=5078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199314861.843:25): login pid=5078 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199314861.850:26): user pid=5078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199314861.894:27): user pid=5078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199314861.894:28): user pid=5078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199318232.346:29): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199318232.346:30): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199318232.437:31): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199318294.904:32): user pid=6047 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199318461.909:33): user pid=6133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199318461.909:34): user pid=6133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199318461.910:35): login pid=6133 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199318461.917:36): user pid=6133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199318461.922:37): user pid=6133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199318461.922:38): user pid=6133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199322061.936:39): user pid=7119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199322061.936:40): user pid=7119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199322061.937:41): login pid=7119 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199322061.946:42): user pid=7119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199322061.951:43): user pid=7119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199322061.951:44): user pid=7119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199325661.964:45): user pid=8090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199325661.964:46): user pid=8090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199325661.965:47): login pid=8090 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199325661.971:48): user pid=8090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199325661.976:49): user pid=8090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199325661.976:50): user pid=8090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199329261.989:51): user pid=9068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199329261.990:52): user pid=9068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199329261.990:53): login pid=9068 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199329261.998:54): user pid=9068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199329262.003:55): user pid=9068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199329262.004:56): user pid=9068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199332861.017:57): user pid=10101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199332861.018:58): user pid=10101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199332861.018:59): login pid=10101 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199332861.024:60): user pid=10101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199332861.029:61): user pid=10101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199332861.029:62): user pid=10101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199336461.043:63): user pid=11075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199336461.044:64): user pid=11075 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199336461.044:65): login pid=11075 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199336461.052:66): user pid=11075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199336461.056:67): user pid=11075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199336461.057:68): user pid=11075 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199340061.070:69): user pid=12047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199340061.070:70): user pid=12047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199340061.071:71): login pid=12047 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199340061.077:72): user pid=12047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199340061.082:73): user pid=12047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199340061.082:74): user pid=12047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199343661.096:75): user pid=13238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199343661.097:76): user pid=13238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199343661.097:77): login pid=13238 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199343661.104:78): user pid=13238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199343661.110:79): user pid=13238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199343661.110:80): user pid=13238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199347261.123:81): user pid=14210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199347261.124:82): user pid=14210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199347261.124:83): login pid=14210 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199347261.132:84): user pid=14210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199347261.137:85): user pid=14210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199347261.137:86): user pid=14210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199350742.384:87): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199350742.384:88): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199350742.404:89): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1199350833.806:90): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=6058 comm="dbus-launch" sig=6
>type=USER_END msg=audit(1199350860.985:91): user pid=15150 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199350861.152:92): user pid=15237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199350861.153:93): user pid=15237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199350861.153:94): login pid=15237 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199350861.158:95): user pid=15237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199350861.165:96): user pid=15237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199350861.166:97): user pid=15237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199354461.180:98): user pid=16712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199354461.181:99): user pid=16712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199354461.181:100): login pid=16712 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199354461.188:101): user pid=16712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199354461.194:102): user pid=16712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199354461.194:103): user pid=16712 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199354521.202:104): user pid=16732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199354521.202:105): user pid=16732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199354521.203:106): login pid=16732 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199354521.210:107): user pid=16732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199355051.796:108): user pid=16732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199355051.797:109): user pid=16732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199358061.811:110): user pid=18749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199358061.812:111): user pid=18749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199358061.812:112): login pid=18749 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199358061.819:113): user pid=18749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199358061.824:114): user pid=18749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199358061.824:115): user pid=18749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199361661.837:116): user pid=19727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199361661.837:117): user pid=19727 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199361661.837:118): login pid=19727 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199361661.845:119): user pid=19727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199361661.850:120): user pid=19727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199361661.850:121): user pid=19727 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199365261.864:122): user pid=20711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199365261.865:123): user pid=20711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199365261.865:124): login pid=20711 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199365261.870:125): user pid=20711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199365261.875:126): user pid=20711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199365261.875:127): user pid=20711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199366101.884:128): user pid=21013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199366101.885:129): user pid=21013 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199366101.885:130): login pid=21013 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199366101.892:131): user pid=21013 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199368861.420:132): user pid=21779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199368861.421:133): user pid=21779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199368861.421:134): login pid=21779 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199368861.429:135): user pid=21779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199368861.435:136): user pid=21779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199368861.435:137): user pid=21779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199372461.448:138): user pid=22841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199372461.449:139): user pid=22841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199372461.449:140): login pid=22841 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199372461.455:141): user pid=22841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199372461.460:142): user pid=22841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199372461.460:143): user pid=22841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199376061.474:144): user pid=23890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199376061.475:145): user pid=23890 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199376061.475:146): login pid=23890 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199376061.482:147): user pid=23890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199376061.487:148): user pid=23890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199376061.487:149): user pid=23890 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199379661.586:150): user pid=24938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199379661.586:151): user pid=24938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199379661.586:152): login pid=24938 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199379661.607:153): user pid=24938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199379661.640:154): user pid=24938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199379661.640:155): user pid=24938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199383261.779:156): user pid=26984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199383261.798:157): user pid=26984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199383261.799:158): login pid=26984 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199383261.804:159): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199383261.839:160): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199383261.840:161): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199386861.854:162): user pid=27959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199386861.854:163): user pid=27959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199386861.854:164): login pid=27959 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199386861.860:165): user pid=27959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199386861.865:166): user pid=27959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199386861.865:167): user pid=27959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199390461.915:168): user pid=28934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199390461.915:169): user pid=28934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199390461.915:170): login pid=28934 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199390461.921:171): user pid=28934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199390461.961:172): user pid=28934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199390461.962:173): user pid=28934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199394061.993:174): user pid=29938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199394061.993:175): user pid=29938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199394061.994:176): login pid=29938 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199394062.000:177): user pid=29938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199394062.006:178): user pid=29938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199394062.006:179): user pid=29938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1199396131.417:180): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1199396131.417:180): arch=40000003 syscall=5 per=400000 success=yes exit=173 a0=bfe0f742 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=30773 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199397661.556:181): user pid=31263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199397661.557:182): user pid=31263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199397661.557:183): login pid=31263 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199397661.612:184): user pid=31263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199397661.766:185): user pid=31263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199397661.766:186): user pid=31263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199401261.785:187): user pid=32323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199401261.786:188): user pid=32323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199401261.786:189): login pid=32323 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199401261.793:190): user pid=32323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199401261.797:191): user pid=32323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199401261.798:192): user pid=32323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199404861.964:193): user pid=1008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199404861.965:194): user pid=1008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199404861.965:195): login pid=1008 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199404862.019:196): user pid=1008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199404862.056:197): user pid=1008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199404862.056:198): user pid=1008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199408461.070:199): user pid=2034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199408461.071:200): user pid=2034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199408461.071:201): login pid=2034 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199408461.077:202): user pid=2034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199408461.083:203): user pid=2034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199408461.083:204): user pid=2034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199412061.097:205): user pid=3182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199412061.098:206): user pid=3182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199412061.098:207): login pid=3182 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199412061.107:208): user pid=3182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199412061.113:209): user pid=3182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199412061.113:210): user pid=3182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199414224.664:211): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3831 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199415661.127:212): user pid=4238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199415661.127:213): user pid=4238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199415661.128:214): login pid=4238 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199415661.135:215): user pid=4238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199415661.140:216): user pid=4238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199415661.140:217): user pid=4238 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199419261.153:218): user pid=5225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199419261.154:219): user pid=5225 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199419261.154:220): login pid=5225 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199419261.161:221): user pid=5225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199419261.166:222): user pid=5225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199419261.166:223): user pid=5225 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199422861.179:224): user pid=6221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199422861.180:225): user pid=6221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199422861.180:226): login pid=6221 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199422861.187:227): user pid=6221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199422861.192:228): user pid=6221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199422861.192:229): user pid=6221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199426461.208:230): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199426461.209:231): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199426461.209:232): login pid=7253 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199426461.214:233): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199426461.219:234): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199426461.219:235): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199430061.232:236): user pid=8219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199430061.233:237): user pid=8219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199430061.233:238): login pid=8219 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199430061.240:239): user pid=8219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199430061.245:240): user pid=8219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199430061.245:241): user pid=8219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199433661.258:242): user pid=9188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199433661.258:243): user pid=9188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199433661.259:244): login pid=9188 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199433661.265:245): user pid=9188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199433661.270:246): user pid=9188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199433661.270:247): user pid=9188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199437261.284:248): user pid=10163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199437261.284:249): user pid=10163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199437261.285:250): login pid=10163 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199437261.294:251): user pid=10163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199437261.298:252): user pid=10163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199437261.299:253): user pid=10163 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199440861.310:254): user pid=11155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199440861.311:255): user pid=11155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199440861.311:256): login pid=11155 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199440861.318:257): user pid=11155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199440861.323:258): user pid=11155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199440861.323:259): user pid=11155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199440921.330:260): user pid=11172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199440921.330:261): user pid=11172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199440921.330:262): login pid=11172 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199440921.334:263): user pid=11172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1199441362.218:264): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1199441362.218:264): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ad a1=0 a2=bfe0fcdc a3=a3c12c8 items=0 ppid=1 pid=30773 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1199441408.865:265): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1199441408.865:265): arch=40000003 syscall=5 per=400000 success=yes exit=161 a0=bffb7672 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=11796 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1199441461.180:266): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1199441461.180:266): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=a1 a1=0 a2=bffb7c0c a3=8937bd8 items=0 ppid=1 pid=11796 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=CRED_DISP msg=audit(1199441485.879:267): user pid=11172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199441485.879:268): user pid=11172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199444461.908:269): user pid=13296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199444461.909:270): user pid=13296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199444461.909:271): login pid=13296 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199444461.915:272): user pid=13296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199444461.920:273): user pid=13296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199444461.920:274): user pid=13296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199448061.933:275): user pid=14271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199448061.933:276): user pid=14271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199448061.934:277): login pid=14271 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199448061.941:278): user pid=14271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199448061.946:279): user pid=14271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199448061.946:280): user pid=14271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199451661.960:281): user pid=15247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199451661.960:282): user pid=15247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199451661.960:283): login pid=15247 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199451661.969:284): user pid=15247 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199451661.974:285): user pid=15247 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199451661.974:286): user pid=15247 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199452501.983:287): user pid=15487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199452501.983:288): user pid=15487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199452501.984:289): login pid=15487 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199452501.991:290): user pid=15487 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199455261.083:291): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199455261.083:292): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199455261.083:293): login pid=16254 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199455261.093:294): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199455261.098:295): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199455261.098:296): user pid=16254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199458861.111:297): user pid=17256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199458861.112:298): user pid=17256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199458861.112:299): login pid=17256 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199458861.119:300): user pid=17256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199458861.124:301): user pid=17256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199458861.124:302): user pid=17256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199460426.784:303): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17727 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199460452.020:304): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17751 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199460942.064:305): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17897 comm="gs" sig=11
>type=USER_AUTH msg=audit(1199460976.433:306): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199460976.433:307): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199460976.489:308): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.878:309): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.892:310): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.897:311): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/dev/null banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.905:312): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.911:313): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.915:314): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.920:315): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.951:316): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.956:317): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.961:318): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.965:319): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.970:320): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.974:321): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.978:322): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.983:323): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.987:324): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199461008.991:325): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AVC msg=audit(1199461028.225:326): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=18010 tpid=2428 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1199461028.463:327): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.86 spid=2428 tpid=18010 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1199461617.139:328): avc:  denied  { getattr } for  pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199461617.139:328): arch=40000003 syscall=229 success=yes exit=33 a0=b98bb318 a1=32d723 a2=b98b8828 a3=ff items=0 ppid=1 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199461617.140:329): user pid=2821 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1199461619.783:330): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=17931 comm="dbus-launch" sig=6
>type=AVC msg=audit(1199461628.284:331): avc:  denied  { write } for  pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199461628.284:331): arch=40000003 syscall=5 success=yes exit=20 a0=b91561a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199461628.363:332): avc:  denied  { ioctl } for  pid=18190 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199461628.363:332): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfa0e7b8 a3=bfa0e7f8 items=0 ppid=2821 pid=18190 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199461749.651:333): avc:  denied  { write } for  pid=2821 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199461749.651:333): arch=40000003 syscall=5 success=yes exit=20 a0=b91561a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199461749.662:334): avc:  denied  { ioctl } for  pid=18258 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199461749.662:334): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bf98e738 a3=bf98e778 items=0 ppid=2821 pid=18258 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1199461909.421:335): user pid=17919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1199462122.781:336): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18470 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199462258.919:337): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18531 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199462288.929:338): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18557 comm="gs" sig=11
>type=AVC msg=audit(1199462347.397:339): avc:  denied  { write } for  pid=18590 comm="foo2lava-wrappe" name="set" dev=dm-0 ino=8061080 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1199462347.397:339): arch=40000003 syscall=5 success=yes exit=5 a0=860d4a0 a1=8241 a2=1b6 a3=8241 items=0 ppid=18588 pid=18590 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foo2lava-wrappe" exe="/bin/bash" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199462347.399:340): avc:  denied  { setattr } for  pid=18592 comm="chmod" name="set" dev=dm-0 ino=8061080 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1199462347.399:340): arch=40000003 syscall=306 success=no exit=-1 a0=ffffff9c a1=96d18d8 a2=1b6 a3=96d18d8 items=0 ppid=18590 pid=18592 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="chmod" exe="/bin/chmod" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1199462461.141:341): user pid=18650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199462461.142:342): user pid=18650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199462461.142:343): login pid=18650 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199462461.148:344): user pid=18650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199462461.155:345): user pid=18650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199462461.155:346): user pid=18650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199462590.985:347): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18704 comm="gs" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.851:348): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.855:349): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.876:350): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.881:351): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199462795.886:352): avc:  denied  { getattr } for  pid=18823 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199462795.886:352): arch=40000003 syscall=229 success=yes exit=33 a0=41eb8588 a1=402a6723 a2=41eb7ca0 a3=ff items=0 ppid=18822 pid=18823 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.886:353): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.891:354): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.937:355): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199462795.942:356): user pid=18823 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199462829.525:357): avc:  denied  { write } for  pid=18823 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199462829.525:357): arch=40000003 syscall=5 success=yes exit=19 a0=41eb81a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=18823 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199462829.530:358): avc:  denied  { ioctl } for  pid=18840 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199462829.530:358): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfeec4c8 a3=bfeec508 items=0 ppid=18823 pid=18840 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.380:359): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.383:360): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.386:361): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.389:362): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1199463089.392:363): avc:  denied  { getattr } for  pid=19366 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199463089.392:363): arch=40000003 syscall=229 success=yes exit=33 a0=419a5588 a1=402a6723 a2=419a4ca0 a3=ff items=0 ppid=19365 pid=19366 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.393:364): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.396:365): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.400:366): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1199463089.403:367): user pid=19366 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.com, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199464422.203:368): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_ACCT msg=audit(1199464422.206:369): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_START msg=audit(1199464422.223:370): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_ACQ msg=audit(1199464422.241:371): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_DISP msg=audit(1199464426.343:372): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1199464426.343:373): user pid=19886 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_AUTH msg=audit(1199464435.723:374): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_ACCT msg=audit(1199464435.727:375): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_START msg=audit(1199464435.743:376): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_ACQ msg=audit(1199464435.743:377): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_DISP msg=audit(1199464472.107:378): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1199464472.107:379): user pid=19934 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=rick exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_AUTH msg=audit(1199464506.188:380): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_ACCT msg=audit(1199464506.191:381): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_START msg=audit(1199464506.209:382): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_ACQ msg=audit(1199464506.210:383): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_DISP msg=audit(1199464607.691:384): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1199464607.692:385): user pid=20021 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_AUTH msg=audit(1199464612.269:386): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_ACCT msg=audit(1199464612.273:387): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_START msg=audit(1199464612.288:388): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=CRED_ACQ msg=audit(1199464612.288:389): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=ANOM_ABEND msg=audit(1199464650.026:390): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20186 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199464723.911:391): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20230 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199464799.605:392): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20274 comm="gs" sig=11
>type=USER_ACCT msg=audit(1199466061.171:393): user pid=20636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199466061.172:394): user pid=20636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199466061.172:395): login pid=20636 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199466061.179:396): user pid=20636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199466061.184:397): user pid=20636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199466061.185:398): user pid=20636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199469661.198:399): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199469661.199:400): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199469661.199:401): login pid=21610 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199469661.207:402): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199469661.213:403): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199469661.213:404): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199473261.229:405): user pid=23222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199473261.230:406): user pid=23222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199473261.231:407): login pid=23222 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199473261.237:408): user pid=23222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199473261.244:409): user pid=23222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199473261.244:410): user pid=23222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199476861.265:411): user pid=24752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199476861.265:412): user pid=24752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199476861.266:413): login pid=24752 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199476861.273:414): user pid=24752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199476861.278:415): user pid=24752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199476861.278:416): user pid=24752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199480461.292:417): user pid=25748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199480461.292:418): user pid=25748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199480461.293:419): login pid=25748 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199480461.302:420): user pid=25748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199480461.307:421): user pid=25748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199480461.307:422): user pid=25748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199483393.757:423): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=USER_END msg=audit(1199483393.757:424): user pid=20117 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/12 res=success)'
>type=ANOM_ABEND msg=audit(1199483451.412:425): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26691 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199483503.648:426): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26725 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1199483602.054:427): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26765 comm="gs" sig=11
>type=USER_ACCT msg=audit(1199484061.321:428): user pid=26896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199484061.322:429): user pid=26896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199484061.322:430): login pid=26896 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199484061.330:431): user pid=26896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199484061.335:432): user pid=26896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199484061.335:433): user pid=26896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199487661.349:434): user pid=28363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199487661.350:435): user pid=28363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199487661.350:436): login pid=28363 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199487661.358:437): user pid=28363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199487661.363:438): user pid=28363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199487661.364:439): user pid=28363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199491261.377:440): user pid=29383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199491261.377:441): user pid=29383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199491261.377:442): login pid=29383 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199491261.386:443): user pid=29383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199491261.391:444): user pid=29383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199491261.391:445): user pid=29383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199494861.404:446): user pid=30368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199494861.405:447): user pid=30368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199494861.405:448): login pid=30368 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199494861.413:449): user pid=30368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199494861.417:450): user pid=30368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199494861.417:451): user pid=30368 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199498461.431:452): user pid=31347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199498461.431:453): user pid=31347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199498461.431:454): login pid=31347 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199498461.438:455): user pid=31347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199498461.442:456): user pid=31347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199498461.442:457): user pid=31347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199502061.456:458): user pid=412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199502061.457:459): user pid=412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199502061.457:460): login pid=412 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199502061.463:461): user pid=412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199502061.469:462): user pid=412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199502061.469:463): user pid=412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199505661.483:464): user pid=1795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199505661.483:465): user pid=1795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199505661.483:466): login pid=1795 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199505661.492:467): user pid=1795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199505661.497:468): user pid=1795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199505661.497:469): user pid=1795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199509261.510:470): user pid=2926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199509261.511:471): user pid=2926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199509261.511:472): login pid=2926 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199509261.519:473): user pid=2926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199509261.524:474): user pid=2926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199509261.524:475): user pid=2926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199512861.537:476): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199512861.538:477): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199512861.538:478): login pid=3981 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199512861.544:479): user pid=3981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199512861.549:480): user pid=3981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199512861.550:481): user pid=3981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199516461.563:482): user pid=4976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199516461.563:483): user pid=4976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199516461.564:484): login pid=4976 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199516461.570:485): user pid=4976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199516461.575:486): user pid=4976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199516461.575:487): user pid=4976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199520061.588:488): user pid=5948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199520061.589:489): user pid=5948 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199520061.589:490): login pid=5948 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199520061.598:491): user pid=5948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199520061.603:492): user pid=5948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199520061.603:493): user pid=5948 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199523661.616:494): user pid=6924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199523661.617:495): user pid=6924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199523661.617:496): login pid=6924 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199523661.625:497): user pid=6924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199523661.630:498): user pid=6924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199523661.630:499): user pid=6924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199527261.645:500): user pid=7944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199527261.645:501): user pid=7944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199527261.646:502): login pid=7944 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199527261.652:503): user pid=7944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199527261.657:504): user pid=7944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199527261.657:505): user pid=7944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199527321.665:506): user pid=7969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199527321.665:507): user pid=7969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199527321.665:508): login pid=7969 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199527321.674:509): user pid=7969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199527991.221:510): user pid=7969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199527991.221:511): user pid=7969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199530861.234:512): user pid=11433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199530861.235:513): user pid=11433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199530861.235:514): login pid=11433 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199530861.244:515): user pid=11433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199530861.249:516): user pid=11433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199530861.249:517): user pid=11433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199534461.262:518): user pid=12414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199534461.263:519): user pid=12414 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199534461.263:520): login pid=12414 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199534461.271:521): user pid=12414 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199534461.276:522): user pid=12414 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199534461.276:523): user pid=12414 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199538061.290:524): user pid=13397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199538061.291:525): user pid=13397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199538061.291:526): login pid=13397 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199538061.298:527): user pid=13397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199538061.303:528): user pid=13397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199538061.303:529): user pid=13397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199538901.311:530): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199538901.312:531): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199538901.312:532): login pid=13631 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199538901.319:533): user pid=13631 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199539458.662:534): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13803 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199541661.238:535): user pid=14404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199541661.238:536): user pid=14404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199541661.238:537): login pid=14404 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199541661.247:538): user pid=14404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199541661.275:539): user pid=14404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199541661.275:540): user pid=14404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199545261.290:541): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199545261.291:542): user pid=15530 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199545261.291:543): login pid=15530 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199545261.297:544): user pid=15530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199545261.303:545): user pid=15530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199545261.303:546): user pid=15530 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199548861.317:547): user pid=17902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199548861.318:548): user pid=17902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199548861.318:549): login pid=17902 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199548861.327:550): user pid=17902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199548861.333:551): user pid=17902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199548861.334:552): user pid=17902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199552461.347:553): user pid=18972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199552461.348:554): user pid=18972 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199552461.348:555): login pid=18972 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199552461.356:556): user pid=18972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199552461.361:557): user pid=18972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199552461.362:558): user pid=18972 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199555009.846:559): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19691 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199556061.375:560): user pid=19976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199556061.376:561): user pid=19976 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199556061.376:562): login pid=19976 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199556061.383:563): user pid=19976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199556061.388:564): user pid=19976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199556061.389:565): user pid=19976 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199559661.402:566): user pid=20969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199559661.403:567): user pid=20969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199559661.403:568): login pid=20969 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199559661.412:569): user pid=20969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199559661.417:570): user pid=20969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199559661.417:571): user pid=20969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199563261.432:572): user pid=22071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199563261.433:573): user pid=22071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199563261.433:574): login pid=22071 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199563261.443:575): user pid=22071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199563261.448:576): user pid=22071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199563261.448:577): user pid=22071 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199566861.462:578): user pid=23097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199566861.463:579): user pid=23097 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199566861.463:580): login pid=23097 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199566861.470:581): user pid=23097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199566861.475:582): user pid=23097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199566861.476:583): user pid=23097 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199570461.489:584): user pid=24078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199570461.489:585): user pid=24078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199570461.489:586): login pid=24078 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199570461.500:587): user pid=24078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199570461.504:588): user pid=24078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199570461.504:589): user pid=24078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199574061.517:590): user pid=25120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199574061.518:591): user pid=25120 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199574061.518:592): login pid=25120 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199574061.526:593): user pid=25120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199574061.532:594): user pid=25120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199574061.533:595): user pid=25120 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199577661.548:596): user pid=26132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199577661.548:597): user pid=26132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199577661.549:598): login pid=26132 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199577661.553:599): user pid=26132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199577661.558:600): user pid=26132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199577661.558:601): user pid=26132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199581261.572:602): user pid=27175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199581261.573:603): user pid=27175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199581261.573:604): login pid=27175 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199581261.580:605): user pid=27175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199581261.586:606): user pid=27175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199581261.586:607): user pid=27175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199584861.599:608): user pid=28160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199584861.600:609): user pid=28160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199584861.600:610): login pid=28160 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199584861.609:611): user pid=28160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199584861.614:612): user pid=28160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199584861.615:613): user pid=28160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199588461.628:614): user pid=29234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199588461.628:615): user pid=29234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199588461.629:616): login pid=29234 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199588461.637:617): user pid=29234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199588461.641:618): user pid=29234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199588461.641:619): user pid=29234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199588837.594:620): user pid=29356 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1199592061.656:621): user pid=30770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199592061.656:622): user pid=30770 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199592061.656:623): login pid=30770 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199592061.666:624): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199592061.671:625): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199592061.671:626): user pid=30770 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199592092.627:627): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=30784 comm="ekiga" sig=6
>type=USER_AUTH msg=audit(1199593201.915:628): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199593201.919:629): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1199593202.036:630): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1199593202.047:631): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1199593209.755:632): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1199593209.756:633): user pid=31108 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199595661.685:634): user pid=31833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199595661.686:635): user pid=31833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199595661.686:636): login pid=31833 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199595661.695:637): user pid=31833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199595661.700:638): user pid=31833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199595661.700:639): user pid=31833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199599261.715:640): user pid=5779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199599261.715:641): user pid=5779 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199599261.716:642): login pid=5779 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199599261.724:643): user pid=5779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199599261.729:644): user pid=5779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199599261.729:645): user pid=5779 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199599854.657:646): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5894 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199602861.742:647): user pid=6621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199602861.743:648): user pid=6621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199602861.743:649): login pid=6621 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199602861.749:650): user pid=6621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199602861.754:651): user pid=6621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199602861.755:652): user pid=6621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199606461.773:653): user pid=7614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199606461.774:654): user pid=7614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199606461.774:655): login pid=7614 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199606461.781:656): user pid=7614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199606461.786:657): user pid=7614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199606461.786:658): user pid=7614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199610061.800:659): user pid=8601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199610061.800:660): user pid=8601 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199610061.800:661): login pid=8601 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199610061.810:662): user pid=8601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199610061.815:663): user pid=8601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199610061.815:664): user pid=8601 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199613661.829:665): user pid=9579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199613661.829:666): user pid=9579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199613661.829:667): login pid=9579 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199613661.836:668): user pid=9579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199613661.841:669): user pid=9579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199613661.841:670): user pid=9579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199613721.848:671): user pid=9598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199613721.849:672): user pid=9598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199613721.849:673): login pid=9598 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199613721.854:674): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199614219.499:675): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199614219.500:676): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199614921.509:677): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199614921.510:678): user pid=10538 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199614921.510:679): login pid=10538 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199614921.516:680): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199615624.827:681): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199615624.828:682): user pid=10538 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199617261.838:683): user pid=16155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199617261.838:684): user pid=16155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199617261.838:685): login pid=16155 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199617261.848:686): user pid=16155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199617261.853:687): user pid=16155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199617261.854:688): user pid=16155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199620861.867:689): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199620861.867:690): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199620861.868:691): login pid=17130 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199620861.875:692): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199620861.880:693): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199620861.880:694): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199624461.894:695): user pid=18134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199624461.895:696): user pid=18134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199624461.895:697): login pid=18134 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199624461.902:698): user pid=18134 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199624461.907:699): user pid=18134 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199624461.907:700): user pid=18134 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199625301.915:701): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199625301.916:702): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199625301.916:703): login pid=18404 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199625301.922:704): user pid=18404 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199628061.826:705): user pid=19164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199628061.854:706): user pid=19164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199628061.854:707): login pid=19164 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199628061.889:708): user pid=19164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199628062.031:709): user pid=19164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199628062.032:710): user pid=19164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199631565.725:711): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20119 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199631661.044:712): user pid=20146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199631661.045:713): user pid=20146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199631661.045:714): login pid=20146 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199631661.048:715): user pid=20146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199631661.054:716): user pid=20146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199631661.054:717): user pid=20146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199632908.865:718): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20488 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199635261.068:719): user pid=21148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199635261.069:720): user pid=21148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199635261.069:721): login pid=21148 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199635261.074:722): user pid=21148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199635261.079:723): user pid=21148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199635261.079:724): user pid=21148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199638861.093:725): user pid=22152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199638861.094:726): user pid=22152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199638861.094:727): login pid=22152 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199638861.100:728): user pid=22152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199638861.105:729): user pid=22152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199638861.105:730): user pid=22152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199639836.882:731): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22491 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199642461.118:732): user pid=23200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199642461.118:733): user pid=23200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199642461.118:734): login pid=23200 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199642461.126:735): user pid=23200 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199642461.131:736): user pid=23200 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199642461.131:737): user pid=23200 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199646061.145:738): user pid=24181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199646061.145:739): user pid=24181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199646061.146:740): login pid=24181 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199646061.152:741): user pid=24181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199646061.156:742): user pid=24181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199646061.157:743): user pid=24181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199649661.170:744): user pid=25164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199649661.171:745): user pid=25164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199649661.171:746): login pid=25164 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199649661.178:747): user pid=25164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199649661.183:748): user pid=25164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199649661.183:749): user pid=25164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199653261.197:750): user pid=26151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199653261.198:751): user pid=26151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199653261.198:752): login pid=26151 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199653261.205:753): user pid=26151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199653261.210:754): user pid=26151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199653261.210:755): user pid=26151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199656861.240:756): user pid=27135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199656861.240:757): user pid=27135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199656861.241:758): login pid=27135 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199656861.249:759): user pid=27135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199656861.254:760): user pid=27135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199656861.254:761): user pid=27135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199659968.151:762): avc:  denied  { search } for  pid=10194 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1199659968.151:762): avc:  denied  { read } for  pid=10194 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=AVC msg=audit(1199659968.151:762): avc:  denied  { getattr } for  pid=10194 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199659968.151:762): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebd9c0 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199659968.209:763): avc:  denied  { read } for  pid=10194 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199659968.209:763): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebdd60 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199660461.267:764): user pid=28122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199660461.267:765): user pid=28122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199660461.267:766): login pid=28122 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199660461.274:767): user pid=28122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199660461.278:768): user pid=28122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199660461.279:769): user pid=28122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199664061.294:770): user pid=29398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199664061.295:771): user pid=29398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199664061.295:772): login pid=29398 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199664061.303:773): user pid=29398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199664061.309:774): user pid=29398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199664061.310:775): user pid=29398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199667661.323:776): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199667661.324:777): user pid=30380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199667661.324:778): login pid=30380 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199667661.332:779): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199667661.338:780): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199667661.338:781): user pid=30380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199669982.185:782): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31038 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199671261.352:783): user pid=31385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199671261.352:784): user pid=31385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199671261.353:785): login pid=31385 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199671261.358:786): user pid=31385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199671261.363:787): user pid=31385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199671261.363:788): user pid=31385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199674861.377:789): user pid=32461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199674861.377:790): user pid=32461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199674861.378:791): login pid=32461 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199674861.384:792): user pid=32461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199674861.389:793): user pid=32461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199674861.390:794): user pid=32461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199678461.404:795): user pid=1060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199678461.404:796): user pid=1060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199678461.404:797): login pid=1060 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199678461.411:798): user pid=1060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199678461.416:799): user pid=1060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199678461.416:800): user pid=1060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199682061.430:801): user pid=2064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199682061.430:802): user pid=2064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199682061.431:803): login pid=2064 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199682061.438:804): user pid=2064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199682061.443:805): user pid=2064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199682061.443:806): user pid=2064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199685661.457:807): user pid=3179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199685661.457:808): user pid=3179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199685661.458:809): login pid=3179 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199685661.465:810): user pid=3179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199685661.470:811): user pid=3179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199685661.470:812): user pid=3179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199689261.484:813): user pid=4222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199689261.484:814): user pid=4222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199689261.485:815): login pid=4222 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199689261.491:816): user pid=4222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199689261.496:817): user pid=4222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199689261.496:818): user pid=4222 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199692861.509:819): user pid=6669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199692861.510:820): user pid=6669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199692861.510:821): login pid=6669 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199692861.515:822): user pid=6669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199692861.520:823): user pid=6669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199692861.520:824): user pid=6669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199696461.535:825): user pid=8626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199696461.535:826): user pid=8626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199696461.535:827): login pid=8626 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199696461.544:828): user pid=8626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199696461.548:829): user pid=8626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199696461.548:830): user pid=8626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199700061.562:831): user pid=9608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199700061.563:832): user pid=9608 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199700061.563:833): login pid=9608 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199700061.569:834): user pid=9608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199700061.574:835): user pid=9608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199700061.575:836): user pid=9608 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199700121.581:837): user pid=9624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199700121.582:838): user pid=9624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199700121.582:839): login pid=9624 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199700121.591:840): user pid=9624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199700664.017:841): user pid=9624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199700664.017:842): user pid=9624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199703661.031:843): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199703661.031:844): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199703661.032:845): login pid=11224 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199703661.039:846): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199703661.045:847): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199703661.045:848): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199707261.059:849): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199707261.060:850): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199707261.060:851): login pid=12203 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199707261.066:852): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199707261.071:853): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199707261.071:854): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199710861.086:855): user pid=13268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199710861.086:856): user pid=13268 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199710861.086:857): login pid=13268 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199710861.095:858): user pid=13268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199710861.101:859): user pid=13268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199710861.101:860): user pid=13268 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199711701.110:861): user pid=13511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199711701.111:862): user pid=13511 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199711701.111:863): login pid=13511 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199711701.116:864): user pid=13511 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199714461.152:865): user pid=14274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199714461.172:866): user pid=14274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199714461.172:867): login pid=14274 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199714461.176:868): user pid=14274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199714461.182:869): user pid=14274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199714461.182:870): user pid=14274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199717786.794:871): avc:  denied  { read } for  pid=15199 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199717786.794:871): arch=40000003 syscall=5 success=yes exit=3 a0=9b86c18 a1=8000 a2=0 a3=8000 items=0 ppid=10195 pid=15199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199717786.814:872): avc:  denied  { ioctl } for  pid=15199 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199717786.814:872): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bfa48f98 a3=bfa48fd8 items=0 ppid=10195 pid=15199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199717786.814:873): avc:  denied  { getattr } for  pid=15199 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199717786.814:873): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=9b6a068 a2=776ff4 a3=9b80818 items=0 ppid=10195 pid=15199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1199717928.706:874): avc:  denied  { search } for  pid=15243 comm="CID.cgi" name=".tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199717928.706:874): arch=40000003 syscall=5 success=yes exit=3 a0=8cc3c18 a1=8000 a2=0 a3=8000 items=0 ppid=10197 pid=15243 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199718061.196:875): user pid=15288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199718061.197:876): user pid=15288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199718061.197:877): login pid=15288 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199718061.206:878): user pid=15288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199718061.212:879): user pid=15288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199718061.212:880): user pid=15288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199721661.228:881): user pid=16846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199721661.229:882): user pid=16846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199721661.230:883): login pid=16846 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199721661.234:884): user pid=16846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199721661.244:885): user pid=16846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199721661.244:886): user pid=16846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199725261.261:887): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199725261.262:888): user pid=19508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199725261.262:889): login pid=19508 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199725261.269:890): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199725261.279:891): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199725261.279:892): user pid=19508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199728861.293:893): user pid=20494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199728861.296:894): user pid=20494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199728861.297:895): login pid=20494 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199728861.301:896): user pid=20494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199728861.307:897): user pid=20494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199728861.307:898): user pid=20494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199731415.806:899): avc:  denied  { associate } for  pid=21234 comm="cp" name="volume080107_1" scontext=system_u:object_r:iso9660_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199731415.806:899): arch=40000003 syscall=39 success=yes exit=0 a0=bf8ca58e a1=140 a2=8058394 a3=580 items=0 ppid=3829 pid=21234 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=pts16 comm="cp" exe="/bin/cp" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199732461.335:900): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199732461.336:901): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199732461.336:902): login pid=21739 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199732461.343:903): user pid=21739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199732461.358:904): user pid=21739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199732461.358:905): user pid=21739 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199732483.590:906): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21753 comm="f-spot" sig=6
>type=USER_AUTH msg=audit(1199733655.145:907): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199733655.145:908): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199733655.244:909): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199734017.417:910): user pid=22089 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1199734040.527:911): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1199734040.527:911): arch=40000003 syscall=5 per=400000 success=yes exit=158 a0=bf921192 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=22461 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_AUTH msg=audit(1199735934.275:912): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199735934.276:913): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199735934.286:914): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199736042.531:915): user pid=23052 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1199736050.946:916): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199736050.946:917): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199736050.955:918): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199736061.403:919): user pid=23193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199736061.404:920): user pid=23193 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199736061.404:921): login pid=23193 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199736061.412:922): user pid=23193 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199736061.444:923): user pid=23193 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199736061.444:924): user pid=23193 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199736064.635:925): user pid=23151 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1199736184.565:926): avc:  denied  { search } for  pid=23248 comm="smbd" name="home" dev=dm-0 ino=23166977 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1199736184.565:926): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199736184.565:926): arch=40000003 syscall=195 success=yes exit=0 a0=b869b998 a1=bfa62fe0 a2=4c7ff4 a3=bfa62fe0 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.731:927): avc:  denied  { read } for  pid=23248 comm="smbd" name="rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199736184.731:927): arch=40000003 syscall=5 success=yes exit=25 a0=b8632a40 a1=98800 a2=37bd9c a3=b8687e58 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.731:928): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/.randsig1.pl" dev=dm-0 ino=23266693 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199736184.731:928): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.732:929): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1199736184.732:929): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.732:930): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/video.mpg" dev=dm-0 ino=23265285 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1199736184.732:930): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.740:931): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/.mime.types" dev=dm-0 ino=8061162 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1199736184.740:931): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.741:932): avc:  denied  { read } for  pid=23248 comm="smbd" name=".DCOPserver_dual.rkkda.com_:0" dev=dm-0 ino=23270712 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1199736184.741:932): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.748:933): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/.tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199736184.748:933): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736184.754:934): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/.Devhelp.rick" dev=dm-0 ino=23265283 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199736184.754:934): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736210.899:935): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/Personal/ParkNicollet/volume080107_1" dev=dm-0 ino=39847899 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199736210.899:935): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736210.900:936): avc:  denied  { search } for  pid=23248 comm="smbd" name="volume080107_1" dev=dm-0 ino=39847899 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199736210.900:936): arch=40000003 syscall=195 success=no exit=-2 a0=bfa63c00 a1=bfa61fb0 a2=4c7ff4 a3=bfa61fb0 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736210.909:937): avc:  denied  { read } for  pid=23248 comm="smbd" name="volume080107_1" dev=dm-0 ino=39847899 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199736210.909:937): arch=40000003 syscall=5 success=yes exit=26 a0=b86eaa88 a1=98800 a2=25 a3=b8687e58 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736213.167:938): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/Personal/ParkNicollet/volume080107_1/DicomParser.dll" dev=dm-0 ino=39848014 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=file
>type=SYSCALL msg=audit(1199736213.167:938): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736213.471:939): avc:  denied  { read } for  pid=23248 comm="smbd" name="SHELEXEC.EXE" dev=dm-0 ino=39848021 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=file
>type=SYSCALL msg=audit(1199736213.471:939): arch=40000003 syscall=5 success=yes exit=26 a0=bfa63cd4 a1=8000 a2=0 a3=8000 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736213.472:940): avc:  denied  { lock } for  pid=23248 comm="smbd" path="/home/rick/Personal/ParkNicollet/volume080107_1/SHELEXEC.EXE" dev=dm-0 ino=39848021 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:iso9660_t:s0 tclass=file
>type=SYSCALL msg=audit(1199736213.472:940): arch=40000003 syscall=221 success=yes exit=0 a0=1a a1=400 a2=1 a3=1 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1199736673.039:941): avc:  denied  { getattr } for  pid=23248 comm="smbd" path="/home/rick/.Devhelp.rick" dev=dm-0 ino=23265283 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199736673.039:941): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=23248 auid=500 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1199736824.458:942): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1199736824.458:942): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=9e a1=0 a2=bf92174c a3=9d6e7b0 items=0 ppid=1 pid=22461 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1199738610.566:943): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23937 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199739661.482:944): user pid=24223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199739661.483:945): user pid=24223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199739661.483:946): login pid=24223 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199739661.492:947): user pid=24223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199739661.498:948): user pid=24223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199739661.498:949): user pid=24223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199743261.512:950): user pid=25201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199743261.512:951): user pid=25201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199743261.512:952): login pid=25201 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199743261.522:953): user pid=25201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199743261.527:954): user pid=25201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199743261.528:955): user pid=25201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199746861.542:956): user pid=26254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199746861.542:957): user pid=26254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199746861.542:958): login pid=26254 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199746861.550:959): user pid=26254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199746861.556:960): user pid=26254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199746861.556:961): user pid=26254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199747233.734:962): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199747233.737:963): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1199747233.748:964): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1199747233.772:965): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1199747239.636:966): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1199747239.637:967): user pid=26371 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199750461.570:968): user pid=27264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199750461.571:969): user pid=27264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199750461.571:970): login pid=27264 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199750461.579:971): user pid=27264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199750461.584:972): user pid=27264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199750461.584:973): user pid=27264 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199754061.598:974): user pid=28413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199754061.599:975): user pid=28413 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199754061.599:976): login pid=28413 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199754061.606:977): user pid=28413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199754061.611:978): user pid=28413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199754061.611:979): user pid=28413 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199757661.625:980): user pid=29380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199757661.625:981): user pid=29380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199757661.626:982): login pid=29380 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199757661.634:983): user pid=29380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199757661.638:984): user pid=29380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199757661.638:985): user pid=29380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199761261.653:986): user pid=30994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199761261.654:987): user pid=30994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199761261.654:988): login pid=30994 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199761261.664:989): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199761261.670:990): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199761261.671:991): user pid=30994 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199764861.684:992): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199764861.685:993): user pid=31978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199764861.685:994): login pid=31978 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199764861.694:995): user pid=31978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199764861.698:996): user pid=31978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199764861.699:997): user pid=31978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199768461.712:998): user pid=488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199768461.712:999): user pid=488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199768461.713:1000): login pid=488 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199768461.718:1001): user pid=488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199768461.723:1002): user pid=488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199768461.723:1003): user pid=488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199772061.736:1004): user pid=1476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199772061.736:1005): user pid=1476 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199772061.736:1006): login pid=1476 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199772061.744:1007): user pid=1476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199772061.748:1008): user pid=1476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199772061.748:1009): user pid=1476 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199775661.761:1010): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199775661.762:1011): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199775661.762:1012): login pid=2486 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199775661.768:1013): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199775661.773:1014): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199775661.773:1015): user pid=2486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199779261.787:1016): user pid=3614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199779261.787:1017): user pid=3614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199779261.787:1018): login pid=3614 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199779261.795:1019): user pid=3614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199779261.800:1020): user pid=3614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199779261.800:1021): user pid=3614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199782861.814:1022): user pid=4856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199782861.815:1023): user pid=4856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199782861.815:1024): login pid=4856 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199782861.823:1025): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199782861.829:1026): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199782861.829:1027): user pid=4856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199786461.843:1028): user pid=5837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199786461.844:1029): user pid=5837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199786461.844:1030): login pid=5837 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199786461.851:1031): user pid=5837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199786461.856:1032): user pid=5837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199786461.856:1033): user pid=5837 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199786521.863:1034): user pid=5856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199786521.863:1035): user pid=5856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199786521.863:1036): login pid=5856 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199786521.873:1037): user pid=5856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199787094.896:1038): user pid=5856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199787094.896:1039): user pid=5856 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199790061.910:1040): user pid=9738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199790061.911:1041): user pid=9738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199790061.911:1042): login pid=9738 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199790061.919:1043): user pid=9738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199790061.924:1044): user pid=9738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199790061.924:1045): user pid=9738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199793661.938:1046): user pid=10747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199793661.939:1047): user pid=10747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199793661.939:1048): login pid=10747 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199793661.948:1049): user pid=10747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199793661.953:1050): user pid=10747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199793661.953:1051): user pid=10747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199797261.968:1052): user pid=12966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199797261.968:1053): user pid=12966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199797261.969:1054): login pid=12966 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199797261.977:1055): user pid=12966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199797261.981:1056): user pid=12966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199797261.982:1057): user pid=12966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199798101.990:1058): user pid=13200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199798101.991:1059): user pid=13200 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199798101.991:1060): login pid=13200 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199798101.996:1061): user pid=13200 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199800862.244:1062): user pid=13957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199800862.281:1063): user pid=13957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199800862.281:1064): login pid=13957 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199800862.318:1065): user pid=13957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199800862.411:1066): user pid=13957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199800862.411:1067): user pid=13957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199804461.873:1068): user pid=14966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199804461.874:1069): user pid=14966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199804461.874:1070): login pid=14966 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199804461.880:1071): user pid=14966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199804461.885:1072): user pid=14966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199804461.885:1073): user pid=14966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199808061.907:1074): user pid=15967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199808061.908:1075): user pid=15967 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199808061.908:1076): login pid=15967 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199808061.917:1077): user pid=15967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199808061.921:1078): user pid=15967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199808061.922:1079): user pid=15967 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199811661.936:1080): user pid=16945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199811661.936:1081): user pid=16945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199811661.936:1082): login pid=16945 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199811661.941:1083): user pid=16945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199811661.946:1084): user pid=16945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199811661.946:1085): user pid=16945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199815261.959:1086): user pid=17920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199815261.960:1087): user pid=17920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199815261.960:1088): login pid=17920 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199815261.967:1089): user pid=17920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199815261.972:1090): user pid=17920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199815261.972:1091): user pid=17920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199818861.985:1092): user pid=18905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199818861.986:1093): user pid=18905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199818861.986:1094): login pid=18905 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199818861.994:1095): user pid=18905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199818861.998:1096): user pid=18905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199818861.998:1097): user pid=18905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199822461.015:1098): user pid=19878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199822461.016:1099): user pid=19878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199822461.017:1100): login pid=19878 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199822461.023:1101): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199822461.058:1102): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199822461.058:1103): user pid=19878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199823297.557:1104): avc:  denied  { getattr } for  pid=20123 comm="sshd" path="/home/rick/.ssh/authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199823297.557:1104): arch=40000003 syscall=195 success=yes exit=0 a0=b9319fe8 a1=bffb3460 a2=5e1ff4 a3=b9319fe8 items=0 ppid=2463 pid=20123 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199823297.557:1105): avc:  denied  { read } for  pid=20123 comm="sshd" name="authorized_keys" dev=dm-0 ino=16384001 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199823297.557:1105): arch=40000003 syscall=5 success=yes exit=4 a0=b9319fe8 a1=8000 a2=1b6 a3=b9319158 items=0 ppid=2463 pid=20123 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199823297.573:1106): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1199823297.578:1107): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1199823300.640:1108): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1199823300.644:1109): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1199823300.754:1110): user pid=20123 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1199823300.756:1111): login pid=20123 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199823300.756:1112): user pid=20123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1199823300.758:1113): user pid=20130 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1199823301.788:1114): user pid=20123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1199823301.788:1115): user pid=20123 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=AVC msg=audit(1199823385.971:1116): avc:  denied  { getattr } for  pid=20191 comm="sshd" path="/home/rick/.ssh/authorized_keys2" dev=dm-0 ino=16384002 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199823385.971:1116): arch=40000003 syscall=195 success=yes exit=0 a0=b9e19fe8 a1=bfa74f20 a2=5e1ff4 a3=b9e19fe8 items=0 ppid=2463 pid=20191 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199823385.972:1117): avc:  denied  { read } for  pid=20191 comm="sshd" name="authorized_keys2" dev=dm-0 ino=16384002 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199823385.972:1117): arch=40000003 syscall=5 success=yes exit=4 a0=b9e19fe8 a1=8000 a2=1b6 a3=b9e19158 items=0 ppid=2463 pid=20191 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199823385.972:1118): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1199823385.977:1119): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1199823388.949:1120): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1199823388.954:1121): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1199823388.963:1122): user pid=20191 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1199823388.964:1123): login pid=20191 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199823388.964:1124): user pid=20191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1199823388.966:1125): user pid=20195 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1199823389.174:1126): user pid=20191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1199823389.174:1127): user pid=20191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1199823430.418:1128): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1199823430.422:1129): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1199823433.526:1130): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1199823433.530:1131): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1199823433.540:1132): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1199823433.541:1133): login pid=20251 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199823433.542:1134): user pid=20251 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1199823433.543:1135): user pid=20255 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1199823433.749:1136): user pid=20251 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1199823433.750:1137): user pid=20251 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1199826061.075:1138): user pid=21585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199826061.076:1139): user pid=21585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199826061.076:1140): login pid=21585 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199826061.085:1141): user pid=21585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199826061.093:1142): user pid=21585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199826061.093:1143): user pid=21585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199829661.127:1144): user pid=22575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199829661.128:1145): user pid=22575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199829661.128:1146): login pid=22575 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199829661.136:1147): user pid=22575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199829661.140:1148): user pid=22575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199829661.141:1149): user pid=22575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199831214.879:1150): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23004 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199833261.155:1151): user pid=23729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199833261.156:1152): user pid=23729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199833261.156:1153): login pid=23729 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199833261.162:1154): user pid=23729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199833261.171:1155): user pid=23729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199833261.171:1156): user pid=23729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199836861.186:1157): user pid=24883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199836861.187:1158): user pid=24883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199836861.187:1159): login pid=24883 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199836861.194:1160): user pid=24883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199836861.200:1161): user pid=24883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199836861.200:1162): user pid=24883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199840461.213:1163): user pid=25865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199840461.214:1164): user pid=25865 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199840461.214:1165): login pid=25865 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199840461.220:1166): user pid=25865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199840461.224:1167): user pid=25865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199840461.225:1168): user pid=25865 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199844061.237:1169): user pid=26839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199844061.237:1170): user pid=26839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199844061.238:1171): login pid=26839 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199844061.247:1172): user pid=26839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199844061.252:1173): user pid=26839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199844061.252:1174): user pid=26839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199847582.835:1175): avc:  denied  { search } for  pid=10195 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1199847582.835:1175): avc:  denied  { read } for  pid=10195 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1199847582.835:1175): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebfaf0 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10195 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847582.879:1176): avc:  denied  { read } for  pid=10195 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199847582.879:1176): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebfe78 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10195 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847582.897:1177): avc:  denied  { getattr } for  pid=10195 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199847582.897:1177): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ebfea0 items=0 ppid=2632 pid=10195 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847583.039:1178): avc:  denied  { getattr } for  pid=10196 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199847583.039:1178): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec7458 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847583.039:1179): avc:  denied  { getattr } for  pid=10196 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1199847583.039:1179): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec7458 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847583.051:1180): avc:  denied  { read } for  pid=10196 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199847583.051:1180): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebfb70 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847586.588:1181): avc:  denied  { getattr } for  pid=27823 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1199847586.588:1181): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb88 a1=bfbeeadc a2=52bff4 a3=171 items=0 ppid=2632 pid=27823 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847597.306:1182): avc:  denied  { getattr } for  pid=10196 comm="httpd" path="/home/rick/photos/101msdcf/2005/dsc00637.jpg" dev=dm-0 ino=23800866 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199847597.306:1182): arch=40000003 syscall=195 success=yes exit=0 a0=b8ec5ba8 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199847597.306:1183): avc:  denied  { read } for  pid=10196 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199847597.306:1183): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec5f78 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199847661.266:1184): user pid=27845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199847661.267:1185): user pid=27845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199847661.267:1186): login pid=27845 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199847661.273:1187): user pid=27845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199847661.277:1188): user pid=27845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199847661.277:1189): user pid=27845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199847724.068:1190): avc:  denied  { read } for  pid=10199 comm="httpd" name="2005" dev=dm-0 ino=23791979 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199847724.068:1190): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec7be8 a1=98800 a2=c5 a3=64 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1199848392.805:1191): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199848392.805:1192): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199848392.903:1193): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199848408.567:1194): user pid=28061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199851261.293:1195): user pid=29007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199851261.294:1196): user pid=29007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199851261.294:1197): login pid=29007 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199851261.303:1198): user pid=29007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199851261.308:1199): user pid=29007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199851261.308:1200): user pid=29007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199854861.322:1201): user pid=29978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199854861.323:1202): user pid=29978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199854861.323:1203): login pid=29978 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199854861.329:1204): user pid=29978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199854861.334:1205): user pid=29978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199854861.334:1206): user pid=29978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199858461.347:1207): user pid=30963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199858461.348:1208): user pid=30963 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199858461.348:1209): login pid=30963 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199858461.357:1210): user pid=30963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199858461.362:1211): user pid=30963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199858461.362:1212): user pid=30963 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199862061.375:1213): user pid=31938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199862061.376:1214): user pid=31938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199862061.376:1215): login pid=31938 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199862061.385:1216): user pid=31938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199862061.391:1217): user pid=31938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199862061.391:1218): user pid=31938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199865661.404:1219): user pid=1112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199865661.406:1220): user pid=1112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199865661.406:1221): login pid=1112 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199865661.414:1222): user pid=1112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199865661.418:1223): user pid=1112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199865661.418:1224): user pid=1112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199869261.432:1225): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199869261.433:1226): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199869261.433:1227): login pid=3187 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199869261.438:1228): user pid=3187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199869261.443:1229): user pid=3187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199869261.443:1230): user pid=3187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199872861.456:1231): user pid=4229 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199872861.457:1232): user pid=4229 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199872861.457:1233): login pid=4229 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199872861.466:1234): user pid=4229 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199872861.471:1235): user pid=4229 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199872861.471:1236): user pid=4229 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199872921.477:1237): user pid=4248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199872921.477:1238): user pid=4248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199872921.478:1239): login pid=4248 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199872921.483:1240): user pid=4248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199873517.508:1241): user pid=4248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199873517.509:1242): user pid=4248 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199876461.522:1243): user pid=9640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199876461.523:1244): user pid=9640 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199876461.523:1245): login pid=9640 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199876461.532:1246): user pid=9640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199876461.537:1247): user pid=9640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199876461.538:1248): user pid=9640 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199880061.551:1249): user pid=10626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199880061.551:1250): user pid=10626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199880061.551:1251): login pid=10626 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199880061.557:1252): user pid=10626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199880061.561:1253): user pid=10626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199880061.561:1254): user pid=10626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199883661.575:1255): user pid=11717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199883661.576:1256): user pid=11717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199883661.576:1257): login pid=11717 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199883661.584:1258): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199883661.589:1259): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199883661.590:1260): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199884501.598:1261): user pid=11953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199884501.599:1262): user pid=11953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199884501.599:1263): login pid=11953 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199884501.606:1264): user pid=11953 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199887261.089:1265): user pid=12723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199887261.117:1266): user pid=12723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199887261.117:1267): login pid=12723 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199887261.123:1268): user pid=12723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199887261.143:1269): user pid=12723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199887261.143:1270): user pid=12723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199890861.161:1271): user pid=13752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199890861.162:1272): user pid=13752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199890861.162:1273): login pid=13752 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199890861.168:1274): user pid=13752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199890861.177:1275): user pid=13752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199890861.178:1276): user pid=13752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199894461.191:1277): user pid=15905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199894461.191:1278): user pid=15905 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199894461.191:1279): login pid=15905 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199894461.199:1280): user pid=15905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199894461.203:1281): user pid=15905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199894461.203:1282): user pid=15905 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199898061.216:1283): user pid=16883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199898061.217:1284): user pid=16883 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199898061.217:1285): login pid=16883 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199898061.225:1286): user pid=16883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199898061.230:1287): user pid=16883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199898061.230:1288): user pid=16883 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199901661.243:1289): user pid=17858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199901661.244:1290): user pid=17858 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199901661.244:1291): login pid=17858 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199901661.253:1292): user pid=17858 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199901661.257:1293): user pid=17858 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199901661.257:1294): user pid=17858 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199905261.272:1295): user pid=18878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199905261.272:1296): user pid=18878 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199905261.272:1297): login pid=18878 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199905261.279:1298): user pid=18878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199905261.284:1299): user pid=18878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199905261.284:1300): user pid=18878 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199908861.298:1301): user pid=19859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199908861.299:1302): user pid=19859 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199908861.299:1303): login pid=19859 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199908861.305:1304): user pid=19859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199908861.310:1305): user pid=19859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199908861.311:1306): user pid=19859 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199912461.325:1307): user pid=20845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199912461.325:1308): user pid=20845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199912461.325:1309): login pid=20845 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199912461.333:1310): user pid=20845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199912461.337:1311): user pid=20845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199912461.338:1312): user pid=20845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199916061.351:1313): user pid=21833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199916061.352:1314): user pid=21833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199916061.352:1315): login pid=21833 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199916061.359:1316): user pid=21833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199916061.364:1317): user pid=21833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199916061.365:1318): user pid=21833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199919661.378:1319): user pid=22822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199919661.378:1320): user pid=22822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199919661.379:1321): login pid=22822 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199919661.388:1322): user pid=22822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199919661.393:1323): user pid=22822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199919661.393:1324): user pid=22822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199923261.407:1325): user pid=23860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199923261.408:1326): user pid=23860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199923261.408:1327): login pid=23860 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199923261.416:1328): user pid=23860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199923261.421:1329): user pid=23860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199923261.422:1330): user pid=23860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199926861.435:1331): user pid=24853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199926861.436:1332): user pid=24853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199926861.436:1333): login pid=24853 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199926861.443:1334): user pid=24853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199926861.448:1335): user pid=24853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199926861.449:1336): user pid=24853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199930461.462:1337): user pid=25826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199930461.463:1338): user pid=25826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199930461.463:1339): login pid=25826 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199930461.470:1340): user pid=25826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199930461.475:1341): user pid=25826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199930461.475:1342): user pid=25826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199934061.488:1343): user pid=26810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199934061.489:1344): user pid=26810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199934061.489:1345): login pid=26810 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199934061.497:1346): user pid=26810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199934061.501:1347): user pid=26810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199934061.501:1348): user pid=26810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199937661.515:1349): user pid=27832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199937661.516:1350): user pid=27832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199937661.516:1351): login pid=27832 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199937661.524:1352): user pid=27832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199937661.530:1353): user pid=27832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199937661.530:1354): user pid=27832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199941261.544:1355): user pid=28812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199941261.545:1356): user pid=28812 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199941261.545:1357): login pid=28812 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199941261.553:1358): user pid=28812 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199941261.557:1359): user pid=28812 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199941261.558:1360): user pid=28812 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199944861.571:1361): user pid=29793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199944861.571:1362): user pid=29793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199944861.572:1363): login pid=29793 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199944861.579:1364): user pid=29793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199944861.584:1365): user pid=29793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199944861.584:1366): user pid=29793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199948461.597:1367): user pid=30775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199948461.598:1368): user pid=30775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199948461.598:1369): login pid=30775 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199948461.606:1370): user pid=30775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199948461.611:1371): user pid=30775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199948461.611:1372): user pid=30775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199952061.624:1373): user pid=31744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199952061.624:1374): user pid=31744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199952061.625:1375): login pid=31744 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199952061.629:1376): user pid=31744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199952061.635:1377): user pid=31744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199952061.635:1378): user pid=31744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199955661.648:1379): user pid=32713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199955661.649:1380): user pid=32713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199955661.649:1381): login pid=32713 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199955661.657:1382): user pid=32713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199955661.662:1383): user pid=32713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199955661.662:1384): user pid=32713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199957888.946:1385): avc:  denied  { search } for  pid=10201 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1199957888.946:1385): avc:  denied  { read } for  pid=10201 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=AVC msg=audit(1199957888.946:1385): avc:  denied  { getattr } for  pid=10201 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199957888.946:1385): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebd910 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10201 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1199957888.946:1386): avc:  denied  { read } for  pid=10201 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1199957888.946:1386): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebdcb0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10201 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1199959261.676:1387): user pid=1346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199959261.677:1388): user pid=1346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199959261.678:1389): login pid=1346 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199959261.682:1390): user pid=1346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199959261.688:1391): user pid=1346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199959261.688:1392): user pid=1346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199959321.694:1393): user pid=1371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199959321.694:1394): user pid=1371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199959321.695:1395): login pid=1371 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199959321.703:1396): user pid=1371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199959817.352:1397): user pid=1371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199959817.353:1398): user pid=1371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199961252.525:1399): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2842 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199962861.366:1400): user pid=3312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199962861.367:1401): user pid=3312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199962861.367:1402): login pid=3312 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199962861.374:1403): user pid=3312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199962861.380:1404): user pid=3312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199962861.380:1405): user pid=3312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199966461.394:1406): user pid=4351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199966461.394:1407): user pid=4351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199966461.394:1408): login pid=4351 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199966461.401:1409): user pid=4351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199966461.406:1410): user pid=4351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199966461.406:1411): user pid=4351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199967239.138:1412): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4579 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1199969851.500:1413): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5322 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199970061.419:1414): user pid=5382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199970061.420:1415): user pid=5382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199970061.420:1416): login pid=5382 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199970061.429:1417): user pid=5382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199970061.433:1418): user pid=5382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199970061.434:1419): user pid=5382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199970901.442:1420): user pid=5615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199970901.443:1421): user pid=5615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199970901.443:1422): login pid=5615 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1199970901.452:1423): user pid=5615 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199973661.462:1424): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199973661.462:1425): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199973661.463:1426): login pid=6462 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199973661.471:1427): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199973661.499:1428): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199973661.499:1429): user pid=6462 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199977261.513:1430): user pid=7440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199977261.514:1431): user pid=7440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199977261.514:1432): login pid=7440 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199977261.521:1433): user pid=7440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199977261.526:1434): user pid=7440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199977261.526:1435): user pid=7440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199980861.541:1436): user pid=9831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199980861.541:1437): user pid=9831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199980861.541:1438): login pid=9831 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199980861.548:1439): user pid=9831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199980861.554:1440): user pid=9831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199980861.554:1441): user pid=9831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199982955.976:1442): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199982955.980:1443): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1199982956.077:1444): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1199982956.088:1445): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1199982958.961:1446): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1199982958.961:1447): user pid=10668 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1199984461.569:1448): user pid=11202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199984461.569:1449): user pid=11202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199984461.570:1450): login pid=11202 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199984461.576:1451): user pid=11202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199984461.581:1452): user pid=11202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199984461.581:1453): user pid=11202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199988061.595:1454): user pid=12317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199988061.596:1455): user pid=12317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199988061.596:1456): login pid=12317 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199988061.604:1457): user pid=12317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199988061.609:1458): user pid=12317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199988061.610:1459): user pid=12317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199990919.661:1460): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13188 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199991661.625:1461): user pid=13389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199991661.626:1462): user pid=13389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199991661.626:1463): login pid=13389 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199991661.632:1464): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199991661.637:1465): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199991661.637:1466): user pid=13389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199994559.183:1467): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14173 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199995261.650:1468): user pid=14387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199995261.651:1469): user pid=14387 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199995261.651:1470): login pid=14387 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199995261.657:1471): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199995261.662:1472): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199995261.662:1473): user pid=14387 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199998427.896:1474): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=15261 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1199998861.674:1475): user pid=15379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199998861.675:1476): user pid=15379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199998861.675:1477): login pid=15379 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199998861.681:1478): user pid=15379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199998861.686:1479): user pid=15379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199998861.686:1480): user pid=15379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200002461.699:1481): user pid=16358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200002461.700:1482): user pid=16358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200002461.700:1483): login pid=16358 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200002461.707:1484): user pid=16358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200002461.713:1485): user pid=16358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200002461.713:1486): user pid=16358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200006061.727:1487): user pid=17402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200006061.728:1488): user pid=17402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200006061.728:1489): login pid=17402 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200006061.734:1490): user pid=17402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200006061.738:1491): user pid=17402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200006061.738:1492): user pid=17402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200009661.752:1493): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200009661.753:1494): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200009661.753:1495): login pid=18432 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200009661.759:1496): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200009661.764:1497): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200009661.764:1498): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200013261.777:1499): user pid=19415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200013261.778:1500): user pid=19415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200013261.778:1501): login pid=19415 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200013261.784:1502): user pid=19415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200013261.789:1503): user pid=19415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200013261.789:1504): user pid=19415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200014317.647:1505): avc:  denied  { search } for  pid=10194 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1200014317.647:1505): avc:  denied  { read } for  pid=10194 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200014317.647:1505): arch=40000003 syscall=195 success=yes exit=0 a0=b8ec1af8 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014317.647:1506): avc:  denied  { read } for  pid=10194 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200014317.647:1506): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec1e80 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014317.647:1507): avc:  denied  { getattr } for  pid=10194 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200014317.647:1507): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ec1ea8 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014317.691:1508): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200014317.691:1508): arch=40000003 syscall=196 success=yes exit=0 a0=b8ebd430 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014317.691:1509): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200014317.691:1509): arch=40000003 syscall=196 success=yes exit=0 a0=b8ebd430 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014317.692:1510): avc:  denied  { read } for  pid=10198 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200014317.692:1510): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec3b80 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014320.864:1511): avc:  denied  { getattr } for  pid=10194 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200014320.864:1511): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10194 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200014324.011:1512): avc:  denied  { read } for  pid=10199 comm="httpd" name="dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200014324.011:1512): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec1c28 a1=8000 a2=0 a3=8000 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200016861.803:1513): user pid=20398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200016861.804:1514): user pid=20398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200016861.804:1515): login pid=20398 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200016861.811:1516): user pid=20398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200016861.816:1517): user pid=20398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200016861.816:1518): user pid=20398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200019031.880:1519): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20993 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200020461.830:1520): user pid=21376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200020461.830:1521): user pid=21376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200020461.831:1522): login pid=21376 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200020461.836:1523): user pid=21376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200020461.841:1524): user pid=21376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200020461.841:1525): user pid=21376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200024061.855:1526): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200024061.855:1527): user pid=22352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200024061.855:1528): login pid=22352 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200024061.861:1529): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200024061.866:1530): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200024061.867:1531): user pid=22352 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200027661.880:1532): user pid=23332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200027661.880:1533): user pid=23332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200027661.881:1534): login pid=23332 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200027661.888:1535): user pid=23332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200027661.893:1536): user pid=23332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200027661.894:1537): user pid=23332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200028640.719:1538): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23616 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200031261.907:1539): user pid=24322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200031261.907:1540): user pid=24322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200031261.908:1541): login pid=24322 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200031261.916:1542): user pid=24322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200031261.921:1543): user pid=24322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200031261.921:1544): user pid=24322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200034861.934:1545): user pid=25297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200034861.935:1546): user pid=25297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200034861.935:1547): login pid=25297 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200034861.944:1548): user pid=25297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200034861.949:1549): user pid=25297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200034861.949:1550): user pid=25297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200036229.224:1551): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=25671 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200038461.963:1552): user pid=26316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200038461.964:1553): user pid=26316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200038461.964:1554): login pid=26316 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200038461.973:1555): user pid=26316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200038461.978:1556): user pid=26316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200038461.978:1557): user pid=26316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200042061.991:1558): user pid=27285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200042061.992:1559): user pid=27285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200042061.992:1560): login pid=27285 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200042062.000:1561): user pid=27285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200042062.006:1562): user pid=27285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200042062.006:1563): user pid=27285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200045661.020:1564): user pid=28263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200045661.020:1565): user pid=28263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200045661.021:1566): login pid=28263 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200045661.029:1567): user pid=28263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200045661.034:1568): user pid=28263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200045661.034:1569): user pid=28263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200045721.041:1570): user pid=28285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200045721.042:1571): user pid=28285 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200045721.042:1572): login pid=28285 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200045721.051:1573): user pid=28285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200046199.504:1574): user pid=28285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200046199.505:1575): user pid=28285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200049261.518:1576): user pid=29857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200049261.519:1577): user pid=29857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200049261.519:1578): login pid=29857 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200049261.526:1579): user pid=29857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200049261.532:1580): user pid=29857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200049261.532:1581): user pid=29857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200052861.546:1582): user pid=30838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200052861.546:1583): user pid=30838 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200052861.546:1584): login pid=30838 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200052861.555:1585): user pid=30838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200052861.559:1586): user pid=30838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200052861.559:1587): user pid=30838 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200056461.573:1588): user pid=31824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200056461.573:1589): user pid=31824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200056461.574:1590): login pid=31824 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200056461.580:1591): user pid=31824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200056461.585:1592): user pid=31824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200056461.585:1593): user pid=31824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200057301.594:1594): user pid=32058 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200057301.594:1595): user pid=32058 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200057301.594:1596): login pid=32058 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200057301.601:1597): user pid=32058 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200060061.082:1598): user pid=348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200060061.101:1599): user pid=348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200060061.102:1600): login pid=348 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200060061.107:1601): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200060061.127:1602): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200060061.128:1603): user pid=348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200063661.142:1604): user pid=1415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200063661.143:1605): user pid=1415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200063661.143:1606): login pid=1415 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200063661.150:1607): user pid=1415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200063661.157:1608): user pid=1415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200063661.157:1609): user pid=1415 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200067261.171:1610): user pid=3842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200067261.171:1611): user pid=3842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200067261.172:1612): login pid=3842 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200067261.178:1613): user pid=3842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200067261.182:1614): user pid=3842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200067261.182:1615): user pid=3842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1200067328.422:1616): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1200067432.147:1617): avc:  denied  { search } for  pid=10198 comm="httpd" name="public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1200067432.147:1617): avc:  denied  { read } for  pid=10198 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200067432.147:1617): arch=40000003 syscall=195 success=yes exit=0 a0=b8ebdb00 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067432.147:1618): avc:  denied  { read } for  pid=10198 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067432.147:1618): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebde88 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067432.147:1619): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067432.147:1619): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ebdeb0 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067432.184:1620): avc:  denied  { getattr } for  pid=10199 comm="httpd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200067432.184:1620): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec5450 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067432.184:1621): avc:  denied  { getattr } for  pid=10199 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200067432.184:1621): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec5450 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067432.185:1622): avc:  denied  { read } for  pid=10199 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200067432.185:1622): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec1b90 a1=98800 a2=bfbefb18 a3=64 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_AVC msg=audit(1200067557.992:1623): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1200067569.182:1624): avc:  denied  { read } for  pid=10198 comm="httpd" name="photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200067569.182:1624): arch=40000003 syscall=195 success=yes exit=0 a0=b8ec7b50 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067569.182:1625): avc:  denied  { read } for  pid=10198 comm="httpd" name=".htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067569.182:1625): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec7ed0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067569.182:1626): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/public_html/.htaccess" dev=dm-0 ino=57114626 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067569.182:1626): arch=40000003 syscall=197 success=yes exit=0 a0=11 a1=bfbf1adc a2=52bff4 a3=b8ec7ef8 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067569.182:1627): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/public_html/photos" dev=dm-0 ino=26771618 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200067569.182:1627): arch=40000003 syscall=196 success=yes exit=0 a0=b8ec54c8 a1=bfbf1b0c a2=52bff4 a3=2008171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067569.183:1628): avc:  denied  { read } for  pid=10198 comm="httpd" name="101msdcf" dev=dm-0 ino=23791977 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200067569.183:1628): arch=40000003 syscall=5 success=yes exit=17 a0=b8ec7bd8 a1=98800 a2=bfbefb18 a3=64 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067569.214:1629): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067569.214:1629): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067569.214:1630): avc:  denied  { getattr } for  pid=10198 comm="httpd" path="/home/rick/photos/101msdcf/dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067569.214:1630): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10198 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200067738.015:1631): avc:  denied  { read } for  pid=10199 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200067738.015:1631): arch=40000003 syscall=5 success=yes exit=18 a0=b8ec73a0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200070202.405:1632): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4710 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200070861.198:1633): user pid=4902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200070861.199:1634): user pid=4902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200070861.199:1635): login pid=4902 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200070861.206:1636): user pid=4902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200070861.212:1637): user pid=4902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200070861.213:1638): user pid=4902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200074461.227:1639): user pid=5955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200074461.228:1640): user pid=5955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200074461.228:1641): login pid=5955 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200074461.236:1642): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200074461.242:1643): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200074461.243:1644): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200078061.256:1645): user pid=7505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200078061.256:1646): user pid=7505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200078061.257:1647): login pid=7505 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200078061.262:1648): user pid=7505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200078061.267:1649): user pid=7505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200078061.267:1650): user pid=7505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200081661.286:1651): user pid=8495 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200081661.287:1652): user pid=8495 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200081661.287:1653): login pid=8495 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200081661.296:1654): user pid=8495 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200081661.301:1655): user pid=8495 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200081661.301:1656): user pid=8495 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200082626.221:1657): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8767 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200085261.316:1658): user pid=9551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200085261.317:1659): user pid=9551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200085261.317:1660): login pid=9551 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200085261.325:1661): user pid=9551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200085261.330:1662): user pid=9551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200085261.331:1663): user pid=9551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200086508.200:1664): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200086508.204:1665): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1200086508.253:1666): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1200086508.270:1667): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1200086508.760:1668): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1200086508.761:1669): user pid=10541 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200088861.347:1670): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200088861.348:1671): user pid=11656 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200088861.348:1672): login pid=11656 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200088861.357:1673): user pid=11656 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200088861.363:1674): user pid=11656 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200088861.363:1675): user pid=11656 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200090556.314:1676): avc:  denied  { read } for  pid=10196 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200090556.314:1676): arch=40000003 syscall=5 success=yes exit=17 a0=b8ebfb88 a1=98800 a2=bfbefb18 a3=64 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200090556.314:1677): avc:  denied  { getattr } for  pid=10196 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200090556.314:1677): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200090556.314:1678): avc:  denied  { read } for  pid=10196 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200090556.314:1678): arch=40000003 syscall=5 success=yes exit=18 a0=b8ecd350 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10196 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200090559.885:1679): avc:  denied  { getattr } for  pid=10200 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200090559.885:1679): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10200 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200090559.885:1680): avc:  denied  { getattr } for  pid=10200 comm="httpd" path="/home/rick/photos/101msdcf/dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200090559.885:1680): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=10200 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200090598.909:1681): avc:  denied  { read } for  pid=10199 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200090598.909:1681): arch=40000003 syscall=5 success=yes exit=18 a0=b8ed33e8 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=10199 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200092461.377:1682): user pid=12675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200092461.378:1683): user pid=12675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200092461.378:1684): login pid=12675 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200092461.386:1685): user pid=12675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200092461.392:1686): user pid=12675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200092461.392:1687): user pid=12675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200092510.104:1688): avc:  denied  { search } for  pid=12709 comm="smbd" name="home" dev=dm-0 ino=23166977 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1200092510.104:1688): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200092510.104:1688): arch=40000003 syscall=195 success=yes exit=0 a0=b869b2b0 a1=bfa62fe0 a2=4c7ff4 a3=bfa62fe0 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.120:1689): avc:  denied  { read } for  pid=12709 comm="smbd" name="rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200092510.120:1689): arch=40000003 syscall=5 success=yes exit=25 a0=b8633170 a1=98800 a2=37bd9c a3=b8632998 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.135:1690): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/.randsig1.pl" dev=dm-0 ino=23266693 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200092510.135:1690): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.135:1691): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200092510.135:1691): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.135:1692): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/video.mpg" dev=dm-0 ino=23265285 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200092510.135:1692): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ed4 a1=bfa61654 a2=4c7ff4 a3=bfa61654 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.137:1693): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/.mime.types" dev=dm-0 ino=8061162 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:unconfined_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1200092510.137:1693): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.138:1694): avc:  denied  { read } for  pid=12709 comm="smbd" name=".DCOPserver_dual.rkkda.com_:0" dev=dm-0 ino=23270712 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200092510.138:1694): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.142:1695): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/.tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200092510.142:1695): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.145:1696): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/.Devhelp.rick" dev=dm-0 ino=23265283 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200092510.145:1696): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1200092510.146:1697): avc:  denied  { getattr } for  pid=12709 comm="smbd" path="/home/rick/public_html" dev=dm-0 ino=26771617 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200092510.146:1697): arch=40000003 syscall=195 success=yes exit=0 a0=bfa61ac4 a1=bfa61244 a2=4c7ff4 a3=bfa61244 items=0 ppid=23098 pid=12709 auid=500 uid=99 gid=0 euid=99 suid=0 fsuid=99 egid=99 sgid=0 fsgid=99 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200096061.408:1698): user pid=14121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200096061.408:1699): user pid=14121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200096061.409:1700): login pid=14121 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200096061.416:1701): user pid=14121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200096061.421:1702): user pid=14121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200096061.421:1703): user pid=14121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200096614.435:1704): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200096614.435:1705): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200096614.492:1706): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200096696.381:1707): avc:  denied  { read write } for  pid=14458 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200096696.381:1707): arch=40000003 syscall=5 success=yes exit=11 a0=bfc631a4 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200096696.381:1708): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200096696.381:1708): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd00 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200096696.384:1709): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200096696.384:1709): arch=40000003 syscall=5 success=yes exit=13 a0=b80c51d0 a1=0 a2=0 a3=b80c5190 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200096696.384:1710): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200096696.384:1710): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bfc62df8 a3=d items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_END msg=audit(1200096712.419:1711): user pid=14287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200099661.437:1712): user pid=15610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200099661.438:1713): user pid=15610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200099661.439:1714): login pid=15610 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200099661.448:1715): user pid=15610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200099661.455:1716): user pid=15610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200099661.455:1717): user pid=15610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200103261.469:1718): user pid=16664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200103261.470:1719): user pid=16664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200103261.470:1720): login pid=16664 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200103261.476:1721): user pid=16664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200103261.481:1722): user pid=16664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200103261.481:1723): user pid=16664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200106861.494:1724): user pid=17644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200106861.495:1725): user pid=17644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200106861.495:1726): login pid=17644 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200106861.503:1727): user pid=17644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200106861.509:1728): user pid=17644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200106861.509:1729): user pid=17644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200110461.522:1730): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200110461.523:1731): user pid=18619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200110461.523:1732): login pid=18619 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200110461.531:1733): user pid=18619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200110461.536:1734): user pid=18619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200110461.536:1735): user pid=18619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200114061.549:1736): user pid=19596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200114061.550:1737): user pid=19596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200114061.550:1738): login pid=19596 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200114061.559:1739): user pid=19596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200114061.563:1740): user pid=19596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200114061.563:1741): user pid=19596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200115055.372:1742): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19870 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200117661.576:1743): user pid=20574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200117661.577:1744): user pid=20574 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200117661.577:1745): login pid=20574 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200117661.582:1746): user pid=20574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200117661.587:1747): user pid=20574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200117661.587:1748): user pid=20574 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200119689.319:1749): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21122 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200121261.601:1750): user pid=21733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200121261.601:1751): user pid=21733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200121261.602:1752): login pid=21733 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200121261.608:1753): user pid=21733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200121261.613:1754): user pid=21733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200121261.614:1755): user pid=21733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200121752.456:1756): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21872 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200124861.626:1757): user pid=22710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200124861.627:1758): user pid=22710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200124861.628:1759): login pid=22710 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200124861.634:1760): user pid=22710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200124861.639:1761): user pid=22710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200124861.639:1762): user pid=22710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200128461.652:1763): user pid=23686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200128461.653:1764): user pid=23686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200128461.653:1765): login pid=23686 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200128461.661:1766): user pid=23686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200128461.666:1767): user pid=23686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200128461.666:1768): user pid=23686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200132061.679:1769): user pid=24658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200132061.680:1770): user pid=24658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200132061.680:1771): login pid=24658 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200132061.686:1772): user pid=24658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200132061.691:1773): user pid=24658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200132061.691:1774): user pid=24658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200132121.697:1775): user pid=24678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200132121.698:1776): user pid=24678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200132121.698:1777): login pid=24678 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200132121.703:1778): user pid=24678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200132489.329:1779): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24789 comm="f-spot" sig=6
>type=AVC msg=audit(1200132582.858:1780): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200132582.858:1780): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200132582.861:1781): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200132582.861:1781): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200132582.861:1782): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200132582.861:1782): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200132584.952:1783): avc:  denied  { getattr } for  pid=2290 comm="setroubleshootd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200132584.952:1783): arch=40000003 syscall=229 success=yes exit=35 a0=8771de4 a1=474723 a2=90825b8 a3=ff items=0 ppid=1 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200132670.403:1784): user pid=24678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200132670.404:1785): user pid=24678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200135661.419:1786): user pid=26597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200135661.419:1787): user pid=26597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200135661.420:1788): login pid=26597 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200135661.428:1789): user pid=26597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200135661.435:1790): user pid=26597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200135661.435:1791): user pid=26597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200136612.845:1792): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200136612.845:1792): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200136612.847:1793): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200136612.847:1793): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200136612.847:1794): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200136612.847:1794): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200139261.450:1795): user pid=27766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200139261.451:1796): user pid=27766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200139261.451:1797): login pid=27766 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200139261.461:1798): user pid=27766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200139261.467:1799): user pid=27766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200139261.468:1800): user pid=27766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200139878.827:1801): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=27947 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200142861.482:1802): user pid=28833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200142861.482:1803): user pid=28833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200142861.482:1804): login pid=28833 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200142861.491:1805): user pid=28833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200142861.496:1806): user pid=28833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200142861.496:1807): user pid=28833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200143701.504:1808): user pid=29064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200143701.505:1809): user pid=29064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200143701.505:1810): login pid=29064 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200143701.513:1811): user pid=29064 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200146461.403:1812): user pid=29822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200146461.422:1813): user pid=29822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200146461.422:1814): login pid=29822 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200146461.426:1815): user pid=29822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200146461.448:1816): user pid=29822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200146461.448:1817): user pid=29822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200150061.461:1818): user pid=30921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200150061.462:1819): user pid=30921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200150061.462:1820): login pid=30921 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200150061.469:1821): user pid=30921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200150061.474:1822): user pid=30921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200150061.475:1823): user pid=30921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200150867.306:1824): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31272 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200153661.488:1825): user pid=32226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200153661.489:1826): user pid=32226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200153661.489:1827): login pid=32226 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200153661.496:1828): user pid=32226 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200153661.502:1829): user pid=32226 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200153661.502:1830): user pid=32226 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200155862.994:1831): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200155862.994:1831): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200155862.997:1832): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200155862.997:1832): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200155862.997:1833): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200155862.997:1833): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200157261.517:1834): user pid=896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200157261.518:1835): user pid=896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200157261.518:1836): login pid=896 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200157261.523:1837): user pid=896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200157261.530:1838): user pid=896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200157261.530:1839): user pid=896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200160861.545:1840): user pid=1911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200160861.545:1841): user pid=1911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200160861.545:1842): login pid=1911 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200160861.551:1843): user pid=1911 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200160861.556:1844): user pid=1911 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200160861.556:1845): user pid=1911 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200163134.678:1846): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200163134.678:1846): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200163134.680:1847): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200163134.680:1847): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200163134.680:1848): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200163134.680:1848): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200164144.172:1849): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3341 comm="totem-video-thu" sig=11
>type=USER_ACCT msg=audit(1200164461.681:1850): user pid=3548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200164461.682:1851): user pid=3548 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200164461.682:1852): login pid=3548 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200164461.690:1853): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200164461.727:1854): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200164461.727:1855): user pid=3548 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200168061.826:1856): user pid=4635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200168061.827:1857): user pid=4635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200168061.827:1858): login pid=4635 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200168061.833:1859): user pid=4635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200168061.889:1860): user pid=4635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200168061.890:1861): user pid=4635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200169612.092:1862): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200169612.092:1862): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200169612.094:1863): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200169612.094:1863): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200169612.094:1864): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200169612.094:1864): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200170305.440:1865): user pid=5378 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1200170307.991:1866): user pid=5378 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1200170327.871:1867): user pid=5378 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1200171661.904:1868): user pid=5761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200171661.905:1869): user pid=5761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200171661.905:1870): login pid=5761 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200171661.914:1871): user pid=5761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200171661.918:1872): user pid=5761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200171661.919:1873): user pid=5761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200172454.755:1874): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200172454.755:1875): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200172454.800:1876): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1200172741.233:1877): auid=4294967295 uid=68 gid=68 subj=system_u:system_r:hald_t:s0 pid=2894 comm="hald" sig=11
>type=ANOM_ABEND msg=audit(1200172741.288:1878): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:hald_t:s0 pid=2944 comm="hald-addon-cpuf" sig=6
>type=AVC msg=audit(1200172897.021:1879): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200172897.021:1879): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200172897.024:1880): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200172897.024:1880): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200172897.024:1881): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200172897.024:1881): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_END msg=audit(1200172940.747:1882): user pid=5992 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200173251.023:1883): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200173251.023:1884): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200173251.037:1885): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1200173478.164:1886): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200173478.027:1887): policy loaded auid=500
>type=SYSCALL msg=audit(1200173478.027:1887): arch=40000003 syscall=4 success=yes exit=3994289 a0=4 a1=b7b1f000 a2=3cf2b1 a3=bf9a2478 items=0 ppid=6394 pid=6403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200173502.729:1888): user pid=6489 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200173502.730:1889): user pid=6489 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200173504.437:1890): user pid=6492 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200173504.558:1891): user pid=6495 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200173504.563:1892): user pid=6496 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200173504.604:1893): user pid=6500 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1200173541.080:1894): user pid=6552 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200173542.872:1895): user pid=6553 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200173555.579:1896): user pid=6554 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200173557.379:1897): user pid=6560 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200173559.163:1898): user pid=6561 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200173571.724:1899): user pid=6562 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1200175261.935:1900): user pid=7076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200175261.935:1901): user pid=7076 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200175261.936:1902): login pid=7076 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200175261.945:1903): user pid=7076 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200175261.951:1904): user pid=7076 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200175261.951:1905): user pid=7076 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200176871.664:1906): user pid=6244 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200178861.965:1907): user pid=8065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200178861.966:1908): user pid=8065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200178861.966:1909): login pid=8065 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200178861.974:1910): user pid=8065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200178861.980:1911): user pid=8065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200178861.981:1912): user pid=8065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200182461.996:1913): user pid=9099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200182461.997:1914): user pid=9099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200182461.998:1915): login pid=9099 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200182462.003:1916): user pid=9099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200182462.007:1917): user pid=9099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200182462.008:1918): user pid=9099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200186061.021:1919): user pid=10088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200186061.022:1920): user pid=10088 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200186061.022:1921): login pid=10088 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200186061.029:1922): user pid=10088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200186061.035:1923): user pid=10088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200186061.035:1924): user pid=10088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200189661.048:1925): user pid=11069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200189661.049:1926): user pid=11069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200189661.049:1927): login pid=11069 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200189661.058:1928): user pid=11069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200189661.063:1929): user pid=11069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200189661.063:1930): user pid=11069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200193261.076:1931): user pid=12044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200193261.076:1932): user pid=12044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200193261.076:1933): login pid=12044 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200193261.084:1934): user pid=12044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200193261.089:1935): user pid=12044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200193261.089:1936): user pid=12044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200196861.103:1937): user pid=13069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200196861.103:1938): user pid=13069 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200196861.103:1939): login pid=13069 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200196861.111:1940): user pid=13069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200196861.117:1941): user pid=13069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200196861.117:1942): user pid=13069 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200197679.954:1943): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13298 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200200461.131:1944): user pid=14045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200200461.131:1945): user pid=14045 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200200461.131:1946): login pid=14045 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200200461.139:1947): user pid=14045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200200461.145:1948): user pid=14045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200200461.145:1949): user pid=14045 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200204061.158:1950): user pid=15035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200204061.159:1951): user pid=15035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200204061.159:1952): login pid=15035 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200204061.167:1953): user pid=15035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200204061.173:1954): user pid=15035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200204061.173:1955): user pid=15035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200207661.187:1956): user pid=15885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200207661.187:1957): user pid=15885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200207661.187:1958): login pid=15885 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200207661.195:1959): user pid=15885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200207661.201:1960): user pid=15885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200207661.201:1961): user pid=15885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200211261.215:1962): user pid=16860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200211261.215:1963): user pid=16860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200211261.215:1964): login pid=16860 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200211261.221:1965): user pid=16860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200211261.227:1966): user pid=16860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200211261.227:1967): user pid=16860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200214861.240:1968): user pid=17843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200214861.241:1969): user pid=17843 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200214861.241:1970): login pid=17843 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200214861.250:1971): user pid=17843 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200214861.257:1972): user pid=17843 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200214861.257:1973): user pid=17843 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200218461.271:1974): user pid=18825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200218461.271:1975): user pid=18825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200218461.272:1976): login pid=18825 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200218461.277:1977): user pid=18825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200218461.282:1978): user pid=18825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200218461.282:1979): user pid=18825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200218521.289:1980): user pid=18841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200218521.290:1981): user pid=18841 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200218521.290:1982): login pid=18841 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200218521.297:1983): user pid=18841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200218993.567:1984): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200218993.567:1984): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200218993.570:1985): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200218993.570:1985): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200218993.570:1986): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200218993.570:1986): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200219235.632:1987): user pid=18841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200219235.633:1988): user pid=18841 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200219721.642:1989): user pid=26329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200219721.643:1990): user pid=26329 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200219721.643:1991): login pid=26329 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200219721.652:1992): user pid=26329 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200220410.042:1993): user pid=26329 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200220410.043:1994): user pid=26329 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200222061.053:1995): user pid=32084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200222061.054:1996): user pid=32084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200222061.054:1997): login pid=32084 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200222061.063:1998): user pid=32084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200222061.069:1999): user pid=32084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200222061.069:2000): user pid=32084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200225661.083:2001): user pid=607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200225661.084:2002): user pid=607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200225661.084:2003): login pid=607 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200225661.093:2004): user pid=607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200225661.098:2005): user pid=607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200225661.098:2006): user pid=607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200229261.112:2007): user pid=1589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200229261.112:2008): user pid=1589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200229261.112:2009): login pid=1589 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200229261.118:2010): user pid=1589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200229261.123:2011): user pid=1589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200229261.123:2012): user pid=1589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200230101.131:2013): user pid=1826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200230101.132:2014): user pid=1826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200230101.132:2015): login pid=1826 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200230101.138:2016): user pid=1826 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200232736.312:2017): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2634 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200232861.545:2018): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200232861.567:2019): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200232861.567:2020): login pid=2732 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200232861.572:2021): user pid=2732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200232861.620:2022): user pid=2732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200232861.620:2023): user pid=2732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200236461.654:2024): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200236461.654:2025): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200236461.655:2026): login pid=3785 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200236461.663:2027): user pid=3785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200236461.668:2028): user pid=3785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200236461.669:2029): user pid=3785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200240061.683:2030): user pid=5523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200240061.683:2031): user pid=5523 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200240061.684:2032): login pid=5523 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200240061.690:2033): user pid=5523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200240061.695:2034): user pid=5523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200240061.695:2035): user pid=5523 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200243661.708:2036): user pid=7868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200243661.709:2037): user pid=7868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200243661.709:2038): login pid=7868 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200243661.717:2039): user pid=7868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200243661.722:2040): user pid=7868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200243661.722:2041): user pid=7868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200247261.735:2042): user pid=8847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200247261.735:2043): user pid=8847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200247261.736:2044): login pid=8847 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200247261.741:2045): user pid=8847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200247261.746:2046): user pid=8847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200247261.746:2047): user pid=8847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200250861.760:2048): user pid=9824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200250861.760:2049): user pid=9824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200250861.760:2050): login pid=9824 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200250861.767:2051): user pid=9824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200250861.772:2052): user pid=9824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200250861.772:2053): user pid=9824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200254461.786:2054): user pid=10815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200254461.787:2055): user pid=10815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200254461.787:2056): login pid=10815 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200254461.794:2057): user pid=10815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200254461.798:2058): user pid=10815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200254461.798:2059): user pid=10815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200257971.845:2060): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200257971.845:2060): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200257971.847:2061): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200257971.847:2061): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200257971.847:2062): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200257971.847:2062): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200257975.271:2063): avc:  denied  { read } for  pid=19466 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200257975.271:2063): arch=40000003 syscall=5 success=yes exit=17 a0=b8f91c80 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200257975.271:2064): avc:  denied  { getattr } for  pid=19466 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200257975.271:2064): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200257975.272:2065): avc:  denied  { read } for  pid=19466 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200257975.272:2065): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9f460 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200257977.445:2066): avc:  denied  { getattr } for  pid=19466 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200257977.445:2066): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200257977.446:2067): avc:  denied  { getattr } for  pid=19466 comm="httpd" path="/home/rick/photos/101msdcf/dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200257977.446:2067): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19466 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200257980.734:2068): avc:  denied  { read } for  pid=19468 comm="httpd" name="dsc01180.jpg" dev=dm-0 ino=23805488 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200257980.734:2068): arch=40000003 syscall=5 success=yes exit=17 a0=b8f93d38 a1=8000 a2=0 a3=8000 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200258061.814:2069): user pid=11909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200258061.815:2070): user pid=11909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200258061.815:2071): login pid=11909 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200258061.821:2072): user pid=11909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200258061.827:2073): user pid=11909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200258061.827:2074): user pid=11909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200261661.841:2075): user pid=12894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200261661.841:2076): user pid=12894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200261661.841:2077): login pid=12894 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200261661.849:2078): user pid=12894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200261661.854:2079): user pid=12894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200261661.854:2080): user pid=12894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200265261.869:2081): user pid=13926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200265261.869:2082): user pid=13926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200265261.870:2083): login pid=13926 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200265261.876:2084): user pid=13926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200265261.880:2085): user pid=13926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200265261.880:2086): user pid=13926 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200265674.279:2087): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200265674.279:2088): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200265674.378:2089): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200265687.939:2090): user pid=14045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200265698.822:2091): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200265698.823:2092): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200265698.832:2093): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200265713.287:2094): user pid=14061 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200267047.676:2095): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200267047.676:2095): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200267047.678:2096): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200267047.678:2096): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200267047.678:2097): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200267047.678:2097): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200268861.898:2098): user pid=15044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200268861.899:2099): user pid=15044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200268861.899:2100): login pid=15044 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200268861.909:2101): user pid=15044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200268861.914:2102): user pid=15044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200268861.915:2103): user pid=15044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200272462.159:2104): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200272462.191:2105): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200272462.191:2106): login pid=16156 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200272462.245:2107): user pid=16156 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200272462.330:2108): user pid=16156 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200272462.330:2109): user pid=16156 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200275738.513:2110): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200275738.513:2110): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200275738.515:2111): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200275738.515:2111): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200275738.515:2112): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200275738.515:2112): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200276061.454:2113): user pid=17172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200276061.477:2114): user pid=17172 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200276061.477:2115): login pid=17172 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200276061.506:2116): user pid=17172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200276061.553:2117): user pid=17172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200276061.554:2118): user pid=17172 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200279547.284:2119): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18159 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200279661.813:2120): user pid=18188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200279661.845:2121): user pid=18188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200279661.846:2122): login pid=18188 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200279661.878:2123): user pid=18188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200279661.984:2124): user pid=18188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200279661.984:2125): user pid=18188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200280519.494:2126): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18426 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200283261.347:2127): user pid=19168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200283261.396:2128): user pid=19168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200283261.396:2129): login pid=19168 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200283261.450:2130): user pid=19168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200283261.613:2131): user pid=19168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200283261.614:2132): user pid=19168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200286861.864:2133): user pid=20147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200286861.864:2134): user pid=20147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200286861.865:2135): login pid=20147 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200286862.009:2136): user pid=20147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200286862.064:2137): user pid=20147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200286862.065:2138): user pid=20147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200290461.671:2139): user pid=21153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200290461.717:2140): user pid=21153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200290461.717:2141): login pid=21153 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200290461.790:2142): user pid=21153 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200290462.015:2143): user pid=21153 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200290462.016:2144): user pid=21153 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200294061.304:2145): user pid=22133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200294061.330:2146): user pid=22133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200294061.330:2147): login pid=22133 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200294061.375:2148): user pid=22133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200294061.480:2149): user pid=22133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200294061.480:2150): user pid=22133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200297661.625:2151): user pid=23111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200297661.648:2152): user pid=23111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200297661.649:2153): login pid=23111 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200297661.677:2154): user pid=23111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200297661.731:2155): user pid=23111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200297661.731:2156): user pid=23111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200301261.878:2157): user pid=24089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200301261.910:2158): user pid=24089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200301261.910:2159): login pid=24089 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200301261.939:2160): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200301261.992:2161): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200301261.992:2162): user pid=24089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200301917.005:2163): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200301917.005:2164): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200301917.147:2165): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200301995.302:2166): user pid=24277 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200303035.242:2167): user pid=24606 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200304861.116:2168): user pid=25104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200304861.117:2169): user pid=25104 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200304861.117:2170): login pid=25104 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200304861.143:2171): user pid=25104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200304861.150:2172): user pid=25104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200304861.150:2173): user pid=25104 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200304921.157:2174): user pid=25119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200304921.179:2175): user pid=25119 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200304921.179:2176): login pid=25119 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200304921.185:2177): user pid=25119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200305386.328:2178): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200305386.328:2178): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200305386.331:2179): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200305386.331:2179): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200305386.331:2180): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200305386.331:2180): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200305472.521:2181): user pid=25119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200305472.522:2182): user pid=25119 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200308461.553:2183): user pid=26867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200308461.578:2184): user pid=26867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200308461.578:2185): login pid=26867 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200308461.582:2186): user pid=26867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200308461.605:2187): user pid=26867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200308461.606:2188): user pid=26867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200312061.669:2189): user pid=27844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200312061.669:2190): user pid=27844 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200312061.670:2191): login pid=27844 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200312061.679:2192): user pid=27844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200312061.706:2193): user pid=27844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200312061.707:2194): user pid=27844 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200312741.176:2195): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200312741.176:2195): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200312741.179:2196): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200312741.179:2196): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200312741.179:2197): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200312741.179:2197): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200314523.838:2198): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28599 comm="f-spot" sig=6
>type=AVC msg=audit(1200314756.040:2199): avc:  denied  { getattr } for  pid=19469 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200314756.040:2199): arch=40000003 syscall=195 success=yes exit=0 a0=b8f95a38 a1=bfbf1c0c a2=52bff4 a3=8170 items=0 ppid=2632 pid=19469 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200314756.145:2200): avc:  denied  { read } for  pid=19469 comm="httpd" name="index.rss" dev=dm-0 ino=23798523 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200314756.145:2200): arch=40000003 syscall=5 success=yes exit=17 a0=b8f95ae0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19469 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200315523.616:2201): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28877 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200315661.947:2202): user pid=28916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200315661.948:2203): user pid=28916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200315661.948:2204): login pid=28916 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200315661.995:2205): user pid=28916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200315662.085:2206): user pid=28916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200315662.085:2207): user pid=28916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200319261.312:2208): user pid=29936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200319261.313:2209): user pid=29936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200319261.313:2210): login pid=29936 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200319261.356:2211): user pid=29936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200319261.457:2212): user pid=29936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200319261.458:2213): user pid=29936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200322861.622:2214): user pid=31246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200322861.623:2215): user pid=31246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200322861.623:2216): login pid=31246 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200322861.659:2217): user pid=31246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200322861.684:2218): user pid=31246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200322861.685:2219): user pid=31246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200326461.774:2220): user pid=721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200326461.775:2221): user pid=721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200326461.775:2222): login pid=721 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200326461.785:2223): user pid=721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200326461.834:2224): user pid=721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200326461.834:2225): user pid=721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200330062.142:2226): user pid=2209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200330062.142:2227): user pid=2209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200330062.143:2228): login pid=2209 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200330062.150:2229): user pid=2209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200330062.229:2230): user pid=2209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200330062.229:2231): user pid=2209 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200331130.465:2232): avc:  denied  { search } for  pid=2531 comm="CID.cgi" name=".tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1200331130.465:2232): avc:  denied  { read } for  pid=2531 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200331130.465:2232): arch=40000003 syscall=5 success=yes exit=3 a0=8c7ac18 a1=8000 a2=0 a3=8000 items=0 ppid=19470 pid=2531 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1200331130.465:2233): avc:  denied  { ioctl } for  pid=2531 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200331130.465:2233): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bf801d48 a3=bf801d88 items=0 ppid=19470 pid=2531 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1200331130.465:2234): avc:  denied  { getattr } for  pid=2531 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200331130.465:2234): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=8c5e068 a2=776ff4 a3=8c74818 items=0 ppid=19470 pid=2531 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200333661.243:2235): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200333661.244:2236): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200333661.244:2237): login pid=3342 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200333661.252:2238): user pid=3342 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200333661.256:2239): user pid=3342 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200333661.257:2240): user pid=3342 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200334647.351:2241): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200334647.351:2241): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200334647.353:2242): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200334647.353:2242): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200334647.353:2243): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200334647.353:2243): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200337261.271:2244): user pid=4398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200337261.271:2245): user pid=4398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200337261.271:2246): login pid=4398 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200337261.276:2247): user pid=4398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200337261.282:2248): user pid=4398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200337261.282:2249): user pid=4398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200340861.295:2250): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200340861.296:2251): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200340861.296:2252): login pid=5381 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200340861.301:2253): user pid=5381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200340861.306:2254): user pid=5381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200340861.306:2255): user pid=5381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200344461.340:2256): user pid=6443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200344461.340:2257): user pid=6443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200344461.341:2258): login pid=6443 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200344461.349:2259): user pid=6443 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200344461.356:2260): user pid=6443 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200344461.356:2261): user pid=6443 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200348061.371:2262): user pid=7533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200348061.372:2263): user pid=7533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200348061.372:2264): login pid=7533 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200348061.381:2265): user pid=7533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200348061.386:2266): user pid=7533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200348061.386:2267): user pid=7533 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200351156.569:2268): avc:  denied  { read } for  pid=19465 comm="httpd" name="photos" dev=dm-0 ino=23790432 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200351156.569:2268): arch=40000003 syscall=5 success=yes exit=17 a0=b8f9ecb0 a1=98800 a2=52d120 a3=64 items=0 ppid=2632 pid=19465 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200351156.570:2269): avc:  denied  { getattr } for  pid=19465 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200351156.570:2269): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19465 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200351156.570:2270): avc:  denied  { read } for  pid=19465 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200351156.570:2270): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9a430 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19465 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200351176.911:2271): avc:  denied  { getattr } for  pid=19468 comm="httpd" path="/home/rick/photos/101mnv01/m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200351176.911:2271): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200351176.912:2272): avc:  denied  { read } for  pid=19468 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200351176.912:2272): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9f4e0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200351185.870:2273): avc:  denied  { getattr } for  pid=19470 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=23805483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200351185.870:2273): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19470 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200351661.400:2274): user pid=8506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200351661.401:2275): user pid=8506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200351661.401:2276): login pid=8506 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200351661.408:2277): user pid=8506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200351661.413:2278): user pid=8506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200351661.414:2279): user pid=8506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200354461.619:2280): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200354461.619:2280): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200354461.621:2281): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200354461.621:2281): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200354461.621:2282): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200354461.621:2282): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200355261.427:2283): user pid=9491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200355261.428:2284): user pid=9491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200355261.428:2285): login pid=9491 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200355261.435:2286): user pid=9491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200355261.440:2287): user pid=9491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200355261.440:2288): user pid=9491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200358861.453:2289): user pid=10468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200358861.454:2290): user pid=10468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200358861.454:2291): login pid=10468 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200358861.461:2292): user pid=10468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200358861.466:2293): user pid=10468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200358861.466:2294): user pid=10468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1200361502.586:2295): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200361502.587:2296): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.98, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200361505.720:2297): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200361505.724:2298): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200361505.791:2299): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200361505.793:2300): login pid=11200 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200361505.793:2301): user pid=11200 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200361505.794:2302): user pid=11206 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200361506.385:2303): user pid=11200 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1200361506.386:2304): user pid=11200 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200362461.481:2305): user pid=11517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200362461.482:2306): user pid=11517 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200362461.482:2307): login pid=11517 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200362461.490:2308): user pid=11517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200362461.497:2309): user pid=11517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200362461.497:2310): user pid=11517 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200363929.571:2311): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=11929 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200366061.511:2312): user pid=12506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200366061.512:2313): user pid=12506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200366061.512:2314): login pid=12506 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200366061.521:2315): user pid=12506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200366061.527:2316): user pid=12506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200366061.528:2317): user pid=12506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200368760.414:2318): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13259 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200369661.541:2319): user pid=13504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200369661.542:2320): user pid=13504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200369661.542:2321): login pid=13504 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200369661.548:2322): user pid=13504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200369661.553:2323): user pid=13504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200369661.554:2324): user pid=13504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200372744.379:2325): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200372744.379:2325): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200372744.381:2326): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200372744.381:2326): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200372744.381:2327): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200372744.381:2327): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200373261.567:2328): user pid=14492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200373261.568:2329): user pid=14492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200373261.568:2330): login pid=14492 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200373261.575:2331): user pid=14492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200373261.580:2332): user pid=14492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200373261.580:2333): user pid=14492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200376861.595:2334): user pid=15702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200376861.595:2335): user pid=15702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200376861.595:2336): login pid=15702 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200376861.601:2337): user pid=15702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200376861.606:2338): user pid=15702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200376861.607:2339): user pid=15702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200380461.620:2340): user pid=16672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200380461.620:2341): user pid=16672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200380461.621:2342): login pid=16672 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200380461.629:2343): user pid=16672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200380461.634:2344): user pid=16672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200380461.634:2345): user pid=16672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200384061.648:2346): user pid=17638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200384061.648:2347): user pid=17638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200384061.648:2348): login pid=17638 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200384061.656:2349): user pid=17638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200384061.661:2350): user pid=17638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200384061.661:2351): user pid=17638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200387661.674:2352): user pid=18611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200387661.675:2353): user pid=18611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200387661.675:2354): login pid=18611 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200387661.683:2355): user pid=18611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200387661.688:2356): user pid=18611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200387661.688:2357): user pid=18611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200390191.839:2358): user pid=19303 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200391261.716:2359): user pid=19610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200391261.717:2360): user pid=19610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200391261.717:2361): login pid=19610 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200391261.723:2362): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200391261.729:2363): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200391261.729:2364): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200391321.736:2365): user pid=19628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200391321.737:2366): user pid=19628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200391321.737:2367): login pid=19628 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200391321.745:2368): user pid=19628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200391773.302:2369): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200391773.302:2369): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200391773.305:2370): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200391773.305:2370): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200391773.305:2371): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200391773.305:2371): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200391813.083:2372): user pid=19628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200391813.083:2373): user pid=19628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200394861.097:2374): user pid=21211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200394861.098:2375): user pid=21211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200394861.098:2376): login pid=21211 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200394861.107:2377): user pid=21211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200394861.129:2378): user pid=21211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200394861.129:2379): user pid=21211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200398461.143:2380): user pid=22194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200398461.143:2381): user pid=22194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200398461.144:2382): login pid=22194 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200398461.151:2383): user pid=22194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200398461.156:2384): user pid=22194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200398461.156:2385): user pid=22194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200402061.168:2386): user pid=23188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200402061.169:2387): user pid=23188 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200402061.169:2388): login pid=23188 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200402061.172:2389): user pid=23188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200402061.177:2390): user pid=23188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200402061.177:2391): user pid=23188 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200402901.185:2392): user pid=23419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200402901.185:2393): user pid=23419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200402901.185:2394): login pid=23419 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200402901.192:2395): user pid=23419 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200405661.219:2396): user pid=24182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200405661.240:2397): user pid=24182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200405661.240:2398): login pid=24182 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200405661.271:2399): user pid=24182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200405661.309:2400): user pid=24182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200405661.310:2401): user pid=24182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200406907.214:2402): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200406907.214:2402): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200406907.216:2403): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200406907.216:2403): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200406907.216:2404): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200406907.216:2404): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200409261.479:2405): user pid=25330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200409261.480:2406): user pid=25330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200409261.480:2407): login pid=25330 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200409261.531:2408): user pid=25330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200409261.570:2409): user pid=25330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200409261.570:2410): user pid=25330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200412053.073:2411): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200412053.073:2411): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200412053.075:2412): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200412053.075:2412): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200412053.075:2413): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200412053.075:2413): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200412861.832:2414): user pid=26845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200412861.863:2415): user pid=26845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200412861.864:2416): login pid=26845 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200412861.892:2417): user pid=26845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200412861.991:2418): user pid=26845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200412861.991:2419): user pid=26845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200416461.162:2420): user pid=27828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200416461.162:2421): user pid=27828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200416461.162:2422): login pid=27828 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200416461.206:2423): user pid=27828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200416461.245:2424): user pid=27828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200416461.245:2425): user pid=27828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200420061.462:2426): user pid=28807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200420061.463:2427): user pid=28807 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200420061.463:2428): login pid=28807 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200420061.525:2429): user pid=28807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200420061.580:2430): user pid=28807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200420061.580:2431): user pid=28807 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200422360.509:2432): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200422360.509:2433): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200422360.793:2434): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200422482.718:2435): user pid=29436 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200423661.725:2436): user pid=29811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200423661.726:2437): user pid=29811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200423661.726:2438): login pid=29811 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200423661.739:2439): user pid=29811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200423661.794:2440): user pid=29811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200423661.794:2441): user pid=29811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200427261.996:2442): user pid=30818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200427261.996:2443): user pid=30818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200427261.997:2444): login pid=30818 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200427262.045:2445): user pid=30818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200427262.133:2446): user pid=30818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200427262.133:2447): user pid=30818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200428690.699:2448): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200428690.699:2448): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200428690.701:2449): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200428690.701:2449): arch=40000003 syscall=5 success=yes exit=12 a0=b80c4570 a1=0 a2=0 a3=b80c2958 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200428690.701:2450): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200428690.701:2450): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200430861.322:2451): user pid=31798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200430861.323:2452): user pid=31798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200430861.323:2453): login pid=31798 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200430861.375:2454): user pid=31798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200430861.414:2455): user pid=31798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200430861.414:2456): user pid=31798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200434461.657:2457): user pid=650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200434461.658:2458): user pid=650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200434461.658:2459): login pid=650 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200434461.730:2460): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200434461.826:2461): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200434461.826:2462): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200435409.763:2463): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200435409.763:2464): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200435409.855:2465): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200435435.689:2466): user pid=1050 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200435498.596:2467): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200435498.596:2468): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200435498.605:2469): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200435551.150:2470): user pid=1172 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200436175.924:2471): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200436175.924:2472): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200436175.935:2473): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200436220.525:2474): user pid=1368 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200436252.858:2475): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200436252.858:2475): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200436252.861:2476): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200436252.861:2476): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200436252.861:2477): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200436252.861:2477): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200437365.796:2478): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200437365.796:2478): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200437365.799:2479): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200437365.799:2479): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200437365.799:2480): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200437365.799:2480): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200438061.843:2481): user pid=2169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200438061.844:2482): user pid=2169 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200438061.844:2483): login pid=2169 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200438061.852:2484): user pid=2169 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200438061.858:2485): user pid=2169 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200438061.858:2486): user pid=2169 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200438152.296:2487): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2200 comm="f-spot" sig=6
>type=USER_AUTH msg=audit(1200439823.846:2488): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1200439823.850:2489): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1200439823.861:2490): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1200439823.871:2491): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1200439834.524:2492): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1200439834.524:2493): user pid=2747 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_AUTH msg=audit(1200439873.087:2494): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1200439873.090:2495): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1200439873.100:2496): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1200439873.100:2497): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1200439876.924:2498): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1200439876.924:2499): user pid=2772 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1200441661.873:2500): user pid=3295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200441661.874:2501): user pid=3295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200441661.874:2502): login pid=3295 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200441661.883:2503): user pid=3295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200441661.888:2504): user pid=3295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200441661.888:2505): user pid=3295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200441934.119:2506): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3399 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200445261.902:2507): user pid=4317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200445261.902:2508): user pid=4317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200445261.902:2509): login pid=4317 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200445261.911:2510): user pid=4317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200445261.916:2511): user pid=4317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200445261.916:2512): user pid=4317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200448438.727:2513): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200448438.727:2513): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200448438.730:2514): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200448438.730:2514): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200448438.730:2515): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200448438.730:2515): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200448861.930:2516): user pid=5276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200448861.930:2517): user pid=5276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200448861.930:2518): login pid=5276 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200448861.938:2519): user pid=5276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200448861.943:2520): user pid=5276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200448861.943:2521): user pid=5276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200452462.117:2522): user pid=6232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200452462.117:2523): user pid=6232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200452462.117:2524): login pid=6232 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200452462.168:2525): user pid=6232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200452462.230:2526): user pid=6232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200452462.231:2527): user pid=6232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200456061.559:2528): user pid=7175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200456061.591:2529): user pid=7175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200456061.592:2530): login pid=7175 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200456061.637:2531): user pid=7175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200456061.759:2532): user pid=7175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200456061.759:2533): user pid=7175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200459661.968:2534): user pid=8121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200459661.969:2535): user pid=8121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200459661.969:2536): login pid=8121 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200459662.030:2537): user pid=8121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200459662.085:2538): user pid=8121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200459662.086:2539): user pid=8121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200463257.733:2540): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200463257.733:2541): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200463257.897:2542): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200463261.188:2543): user pid=9078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200463261.189:2544): user pid=9078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200463261.189:2545): login pid=9078 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200463261.219:2546): user pid=9078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200463261.275:2547): user pid=9078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200463261.275:2548): user pid=9078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200464758.552:2549): user pid=9066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_LOGIN msg=audit(1200464997.362:2550): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200464997.367:2551): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200465001.186:2552): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200465001.212:2553): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200465001.292:2554): user pid=9993 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200465001.295:2555): login pid=9993 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200465001.295:2556): user pid=9993 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200465001.296:2557): user pid=10002 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200465002.010:2558): user pid=9993 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200465002.011:2559): user pid=9993 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=AVC msg=audit(1200465611.696:2560): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200465611.696:2560): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200465611.699:2561): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200465611.699:2561): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200465611.699:2562): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200465611.699:2562): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200466861.396:2563): user pid=15179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200466861.397:2564): user pid=15179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200466861.397:2565): login pid=15179 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200466861.416:2566): user pid=15179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200466861.553:2567): user pid=15179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200466861.553:2568): user pid=15179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200470461.705:2569): user pid=16161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200470461.706:2570): user pid=16161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200470461.706:2571): login pid=16161 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200470461.749:2572): user pid=16161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200470461.831:2573): user pid=16161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200470461.832:2574): user pid=16161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200474061.967:2575): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200474061.968:2576): user pid=17130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200474061.968:2577): login pid=17130 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200474062.030:2578): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200474062.087:2579): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200474062.087:2580): user pid=17130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200477661.339:2581): user pid=18099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200477661.340:2582): user pid=18099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200477661.340:2583): login pid=18099 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200477661.402:2584): user pid=18099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200477661.453:2585): user pid=18099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200477661.453:2586): user pid=18099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200477721.460:2587): user pid=18117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200477721.460:2588): user pid=18117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200477721.460:2589): login pid=18117 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200477721.469:2590): user pid=18117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200478189.835:2591): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200478189.835:2591): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200478189.837:2592): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200478189.837:2592): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200478189.837:2593): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200478189.837:2593): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200478360.598:2594): user pid=18117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200478360.599:2595): user pid=18117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200481261.838:2596): user pid=21028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200481261.839:2597): user pid=21028 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200481261.839:2598): login pid=21028 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200481261.890:2599): user pid=21028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200481261.983:2600): user pid=21028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200481261.983:2601): user pid=21028 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200482442.647:2602): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200482442.647:2602): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b80c6bb0 a3=2cbb00 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200482442.658:2603): avc:  denied  { read } for  pid=14458 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200482442.658:2603): arch=40000003 syscall=5 success=yes exit=12 a0=b80c28f0 a1=0 a2=0 a3=b80c28b0 items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200482442.658:2604): avc:  denied  { ioctl } for  pid=14458 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200482442.658:2604): arch=40000003 syscall=54 success=yes exit=0 a0=c a1=80041272 a2=bfc645f8 a3=c items=0 ppid=1 pid=14458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200484442.355:2605): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200484442.355:2606): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200484442.541:2607): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200484512.587:2608): avc:  denied  { read write } for  pid=22095 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200484512.587:2608): arch=40000003 syscall=5 success=yes exit=9 a0=bfefa2a4 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200484512.587:2609): avc:  denied  { ioctl } for  pid=22095 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200484512.587:2609): arch=40000003 syscall=54 success=yes exit=0 a0=9 a1=c134fd00 a2=b8b76270 a3=2cbb00 items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200484512.590:2610): avc:  denied  { read } for  pid=22095 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200484512.590:2610): arch=40000003 syscall=5 success=yes exit=11 a0=b8b73e28 a1=0 a2=0 a3=b8b76270 items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200484512.590:2611): avc:  denied  { ioctl } for  pid=22095 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200484512.590:2611): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=80041272 a2=bfef9ef8 a3=b items=0 ppid=1 pid=22095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200484861.115:2612): user pid=22274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200484861.116:2613): user pid=22274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200484861.116:2614): login pid=22274 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200484861.123:2615): user pid=22274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200484861.158:2616): user pid=22274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200484861.159:2617): user pid=22274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200485289.122:2618): user pid=21918 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200485307.524:2619): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200485307.524:2620): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200485307.543:2621): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200485407.983:2622): user pid=22431 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200485961.286:2623): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200485961.286:2624): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200485961.296:2625): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200486010.073:2626): user pid=22771 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200488461.307:2627): user pid=23489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200488461.308:2628): user pid=23489 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200488461.308:2629): login pid=23489 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200488461.351:2630): user pid=23489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200488461.431:2631): user pid=23489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200488461.431:2632): user pid=23489 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200489301.440:2633): user pid=23720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200489301.440:2634): user pid=23720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200489301.440:2635): login pid=23720 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200489301.447:2636): user pid=23720 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200492061.837:2637): user pid=24480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200492061.869:2638): user pid=24480 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200492061.869:2639): login pid=24480 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200492061.907:2640): user pid=24480 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200492062.066:2641): user pid=24480 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200492062.066:2642): user pid=24480 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200495661.584:2643): user pid=25572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200495661.584:2644): user pid=25572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200495661.584:2645): login pid=25572 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200495661.609:2646): user pid=25572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200495661.663:2647): user pid=25572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200495661.663:2648): user pid=25572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200495699.719:2649): avc:  denied  { read write } for  pid=22581 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200495699.719:2649): arch=40000003 syscall=5 success=yes exit=10 a0=bfa7b064 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200495699.719:2650): avc:  denied  { ioctl } for  pid=22581 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200495699.719:2650): arch=40000003 syscall=54 success=yes exit=0 a0=a a1=c134fd00 a2=b8c12ab8 a3=2cbb00 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200495699.737:2651): avc:  denied  { read } for  pid=22581 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200495699.737:2651): arch=40000003 syscall=5 success=yes exit=13 a0=b8c0f3f0 a1=0 a2=0 a3=b8c0f3b0 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200495699.737:2652): avc:  denied  { ioctl } for  pid=22581 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200495699.737:2652): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bfa7acb8 a3=d items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200495699.845:2653): avc:  denied  { ioctl } for  pid=22581 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200495699.845:2653): arch=40000003 syscall=54 success=yes exit=0 a0=a a1=c134fd02 a2=b8c12ab8 a3=2cbb00 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200495699.874:2654): avc:  denied  { read } for  pid=22581 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200495699.874:2654): arch=40000003 syscall=5 success=yes exit=13 a0=b8c10d28 a1=0 a2=0 a3=b8c0d500 items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200495699.874:2655): avc:  denied  { ioctl } for  pid=22581 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200495699.874:2655): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bfa7acb8 a3=d items=0 ppid=1 pid=22581 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200496808.873:2656): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200496808.873:2657): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200496808.921:2658): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200496821.933:2659): user pid=25982 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200499260.766:2660): user pid=26858 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1200499261.759:2661): user pid=26864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200499261.760:2662): user pid=26864 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200499261.760:2663): login pid=26864 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200499261.767:2664): user pid=26864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200499261.803:2665): user pid=26864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200499261.803:2666): user pid=26864 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200499757.436:2667): avc:  denied  { write } for  pid=27013 comm="rpc.statd" path="pipe:[5099692]" dev=pipefs ino=5099692 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1200499757.436:2667): arch=40000003 syscall=11 success=yes exit=0 a0=9e554a0 a1=9e55340 a2=9e554c8 a3=9e55340 items=0 ppid=27012 pid=27013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
>type=AVC msg=audit(1200499757.438:2668): avc:  denied  { unlink } for  pid=27014 comm="rpc.statd" name="rpc.statd.pid" dev=dm-0 ino=56230336 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1200499757.438:2668): arch=40000003 syscall=10 success=yes exit=0 a0=b7f96c67 a1=0 a2=b7f99730 a3=b7f91f70 items=0 ppid=27013 pid=27014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200502861.823:2669): user pid=29158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200502861.828:2670): user pid=29158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200502861.829:2671): login pid=29158 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200502861.834:2672): user pid=29158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200502861.876:2673): user pid=29158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200502861.877:2674): user pid=29158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200504037.293:2675): avc:  denied  { read write } for  pid=26794 comm="rpc.mountd" name="control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200504037.293:2675): arch=40000003 syscall=5 success=yes exit=11 a0=bf9f88f4 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200504037.293:2676): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200504037.293:2676): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd00 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200504037.296:2677): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200504037.296:2677): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c98 a1=0 a2=0 a3=b9905c58 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200504037.296:2678): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200504037.296:2678): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200506461.997:2679): user pid=30485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200506462.029:2680): user pid=30485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200506462.029:2681): login pid=30485 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200506462.057:2682): user pid=30485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200506462.088:2683): user pid=30485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200506462.089:2684): user pid=30485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200510061.103:2685): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200510061.104:2686): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200510061.104:2687): login pid=31481 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200510061.110:2688): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200510061.116:2689): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200510061.116:2690): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200510758.040:2691): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200510758.040:2691): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200510758.043:2692): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200510758.043:2692): arch=40000003 syscall=5 success=yes exit=13 a0=b9903b48 a1=0 a2=0 a3=b9903b08 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200510758.043:2693): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200510758.043:2693): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200512301.937:2694): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=32417 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200513661.164:2695): user pid=315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200513661.165:2696): user pid=315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200513661.165:2697): login pid=315 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200513661.172:2698): user pid=315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200513661.179:2699): user pid=315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200513661.179:2700): user pid=315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200517261.212:2701): user pid=1440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200517261.212:2702): user pid=1440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200517261.213:2703): login pid=1440 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200517261.218:2704): user pid=1440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200517261.244:2705): user pid=1440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200517261.244:2706): user pid=1440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200518610.072:2707): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200518610.072:2707): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200518610.075:2708): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200518610.075:2708): arch=40000003 syscall=5 success=yes exit=13 a0=b9903b48 a1=0 a2=0 a3=b9903b08 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200518610.075:2709): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200518610.075:2709): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200520861.298:2710): user pid=3571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200520861.299:2711): user pid=3571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200520861.299:2712): login pid=3571 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200520861.317:2713): user pid=3571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200520861.323:2714): user pid=3571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200520861.323:2715): user pid=3571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200523820.088:2716): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200523820.088:2716): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200524461.338:2717): user pid=5438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200524461.339:2718): user pid=5438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200524461.339:2719): login pid=5438 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200524461.345:2720): user pid=5438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200524461.351:2721): user pid=5438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200524461.351:2722): user pid=5438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200524726.084:2723): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200524726.084:2723): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200524726.084:2724): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200524726.084:2724): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200528061.366:2725): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200528061.366:2726): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200528061.367:2727): login pid=6457 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200528061.375:2728): user pid=6457 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200528061.380:2729): user pid=6457 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200528061.380:2730): user pid=6457 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200531661.394:2731): user pid=7429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200531661.394:2732): user pid=7429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200531661.395:2733): login pid=7429 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200531661.401:2734): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200531661.406:2735): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200531661.406:2736): user pid=7429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200535261.420:2737): user pid=8402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200535261.421:2738): user pid=8402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200535261.421:2739): login pid=8402 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200535261.429:2740): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200535261.434:2741): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200535261.435:2742): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200538861.448:2743): user pid=9371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200538861.449:2744): user pid=9371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200538861.449:2745): login pid=9371 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200538861.457:2746): user pid=9371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200538861.462:2747): user pid=9371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200538861.462:2748): user pid=9371 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200542461.497:2749): user pid=10669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200542461.497:2750): user pid=10669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200542461.498:2751): login pid=10669 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200542461.503:2752): user pid=10669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200542461.508:2753): user pid=10669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200542461.509:2754): user pid=10669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1200542563.118:2755): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200542563.123:2756): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200542566.502:2757): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200542566.505:2758): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200542566.599:2759): user pid=10699 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200542566.600:2760): login pid=10699 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200542566.600:2761): user pid=10699 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200542566.602:2762): user pid=10703 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200542566.906:2763): user pid=10699 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200542566.907:2764): user pid=10699 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=AVC msg=audit(1200542846.054:2765): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200542846.054:2765): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200542846.057:2766): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200542846.057:2766): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200542846.057:2767): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200542846.057:2767): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_LOGIN msg=audit(1200543101.043:2768): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200543101.048:2769): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200543104.838:2770): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200543104.842:2771): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200543104.854:2772): user pid=15539 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200543104.856:2773): login pid=15539 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200543104.856:2774): user pid=15539 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200543104.857:2775): user pid=15547 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200543104.930:2776): user pid=15539 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200543104.931:2777): user pid=15539 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=AVC msg=audit(1200543148.321:2778): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="root" dev=tmpfs ino=325 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200543148.321:2778): arch=40000003 syscall=5 success=yes exit=12 a0=b9904830 a1=0 a2=ffffffff a3=b99047f0 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200543451.482:2779): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200543451.482:2779): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200544717.407:2780): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16061 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200546061.525:2781): user pid=16421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200546061.526:2782): user pid=16421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200546061.526:2783): login pid=16421 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200546061.536:2784): user pid=16421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200546061.542:2785): user pid=16421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200546061.542:2786): user pid=16421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200547780.071:2787): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16888 comm="f-spot" sig=6
>type=USER_AUTH msg=audit(1200549404.673:2788): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200549404.775:2789): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200549404.928:2790): user pid=17458 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200549404.930:2791): login pid=17458 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200549404.997:2792): user pid=17458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200549405.098:2793): user pid=17466 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200549405.277:2794): user pid=17458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=USER_END msg=audit(1200549405.396:2795): user pid=17458 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=dylan.rkkda.org, addr=192.168.1.102, terminal=ssh res=success)'
>type=AVC msg=audit(1200549530.766:2796): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200549530.766:2796): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200549530.768:2797): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200549530.768:2797): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200549530.768:2798): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200549530.768:2798): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200549661.558:2799): user pid=17594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200549661.558:2800): user pid=17594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200549661.558:2801): login pid=17594 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200549661.568:2802): user pid=17594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200549661.574:2803): user pid=17594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200549661.575:2804): user pid=17594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200553261.588:2805): user pid=18577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200553261.589:2806): user pid=18577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200553261.589:2807): login pid=18577 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200553261.598:2808): user pid=18577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200553261.602:2809): user pid=18577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200553261.603:2810): user pid=18577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200556861.615:2811): user pid=19556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200556861.616:2812): user pid=19556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200556861.616:2813): login pid=19556 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200556861.622:2814): user pid=19556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200556861.626:2815): user pid=19556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200556861.626:2816): user pid=19556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200560461.640:2817): user pid=20520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200560461.640:2818): user pid=20520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200560461.640:2819): login pid=20520 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200560461.646:2820): user pid=20520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200560461.650:2821): user pid=20520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200560461.651:2822): user pid=20520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200564061.665:2823): user pid=21513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200564061.666:2824): user pid=21513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200564061.666:2825): login pid=21513 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200564061.674:2826): user pid=21513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200564061.679:2827): user pid=21513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200564061.679:2828): user pid=21513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200564121.686:2829): user pid=21532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200564121.687:2830): user pid=21532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200564121.687:2831): login pid=21532 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200564121.695:2832): user pid=21532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200564637.283:2833): user pid=21532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200564637.284:2834): user pid=21532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200564698.488:2835): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200564698.488:2836): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200564698.549:2837): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200564730.795:2838): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/mapper/control" dev=tmpfs ino=287 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200564730.795:2838): arch=40000003 syscall=54 success=yes exit=0 a0=b a1=c134fd02 a2=b9906288 a3=2cbb00 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200564730.797:2839): avc:  denied  { read } for  pid=26794 comm="rpc.mountd" name="sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200564730.797:2839): arch=40000003 syscall=5 success=yes exit=13 a0=b9905c58 a1=0 a2=0 a3=b9903be8 items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=AVC msg=audit(1200564730.797:2840): avc:  denied  { ioctl } for  pid=26794 comm="rpc.mountd" path="/dev/sdb2" dev=tmpfs ino=294 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1200564730.797:2840): arch=40000003 syscall=54 success=yes exit=0 a0=d a1=80041272 a2=bf9f8548 a3=d items=0 ppid=1 pid=26794 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=USER_AVC msg=audit(1200564833.566:2841): user pid=2155 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200564833.276:2842): policy loaded auid=500
>type=SYSCALL msg=audit(1200564833.276:2842): arch=40000003 syscall=4 success=yes exit=3997229 a0=4 a1=b7b7d000 a2=3cfe2d a3=bf848ff8 items=0 ppid=8284 pid=8299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200564863.105:2843): user pid=8357 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200564863.139:2844): user pid=8358 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200564863.142:2845): user pid=8359 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200564863.144:2846): user pid=8360 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200564894.179:2847): user pid=8400 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200564896.140:2848): user pid=8401 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1200564901.272:2849): user pid=8403 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ROLE_CHANGE msg=audit(1200564909.593:2850): user pid=8402 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200564911.549:2851): user pid=8413 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200564913.453:2852): user pid=8414 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200564926.757:2853): user pid=8415 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1200564943.649:2854): user pid=25480 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200564992.565:2855): user pid=8465 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200565085.850:2856): avc:  denied  { read } for  pid=8518 comm="cvs" name="config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565085.850:2856): arch=40000003 syscall=5 success=yes exit=3 a0=9780640 a1=8000 a2=1b6 a3=9780b60 items=0 ppid=2473 pid=8518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565085.867:2857): avc:  denied  { getattr } for  pid=8518 comm="cvs" path="/home/cvs/CVSROOT/config" dev=dm-0 ino=23200189 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565085.867:2857): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=bfc20b2c a2=776ff4 a3=9780b60 items=0 ppid=2473 pid=8518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1200565085.885:2858): user pid=8518 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200565085.888:2859): user pid=8518 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200565085.922:2860): avc:  denied  { read } for  pid=8518 comm="cvs" name="CVSROOT" dev=dm-0 ino=23199751 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200565085.922:2860): arch=40000003 syscall=33 success=yes exit=0 a0=97846a0 a1=5 a2=97846a0 a3=978060d items=0 ppid=2473 pid=8518 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565085.988:2861): avc:  denied  { write } for  pid=8522 comm="cvs" name="giantmap" dev=dm-0 ino=23200675 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1200565085.988:2861): avc:  denied  { add_name } for  pid=8522 comm="cvs" name="#cvs.lock" scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1200565085.988:2861): avc:  denied  { create } for  pid=8522 comm="cvs" name="#cvs.lock" scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200565085.988:2861): arch=40000003 syscall=39 success=yes exit=0 a0=9796670 a1=1ff a2=0 a3=9796670 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565086.020:2862): avc:  denied  { create } for  pid=8522 comm="cvs" name="#cvs.rfl.dual.rkkda.com.8522" scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=AVC msg=audit(1200565086.020:2862): avc:  denied  { write } for  pid=8522 comm="cvs" name="#cvs.rfl.dual.rkkda.com.8522" dev=dm-0 ino=28508162 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565086.020:2862): arch=40000003 syscall=5 success=yes exit=4 a0=97966a0 a1=8242 a2=1b6 a3=97966e0 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565086.032:2863): avc:  denied  { remove_name } for  pid=8522 comm="cvs" name="#cvs.lock" dev=dm-0 ino=40534042 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1200565086.032:2863): avc:  denied  { rmdir } for  pid=8522 comm="cvs" name="#cvs.lock" dev=dm-0 ino=40534042 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200565086.032:2863): arch=40000003 syscall=40 success=yes exit=0 a0=9796670 a1=0 a2=80dccd4 a3=97848c0 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565086.051:2864): avc:  denied  { unlink } for  pid=8522 comm="cvs" name="#cvs.rfl.dual.rkkda.com.8522" dev=dm-0 ino=28508162 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565086.051:2864): arch=40000003 syscall=10 success=yes exit=0 a0=9796f38 a1=0 a2=9796f38 a3=80dccd4 items=0 ppid=8518 pid=8522 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1200565092.591:2865): user pid=8535 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200565092.594:2866): user pid=8535 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200565114.051:2867): user pid=8547 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200565114.054:2868): user pid=8547 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200565135.691:2869): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200565135.694:2870): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200565158.016:2871): user pid=8583 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200565158.019:2872): user pid=8583 uid=0 auid=4294967295 subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/bin/cvs" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200565162.482:2873): avc:  denied  { setattr } for  pid=8589 comm="cvs" name=",giantmap," dev=dm-0 ino=28508198 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565162.482:2873): arch=40000003 syscall=94 success=yes exit=0 a0=4 a1=816d a2=865ae5a a3=865ae5b items=0 ppid=8583 pid=8589 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565162.491:2874): avc:  denied  { rename } for  pid=8589 comm="cvs" name=",giantmap," dev=dm-0 ino=28508198 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565162.491:2874): arch=40000003 syscall=38 success=yes exit=0 a0=865f658 a1=865ae40 a2=865ae40 a3=865f658 items=0 ppid=8583 pid=8589 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200565162.520:2875): avc:  denied  { append } for  pid=8589 comm="cvs" name="history" dev=dm-0 ino=23200195 scontext=system_u:system_r:cvs_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200565162.520:2875): arch=40000003 syscall=5 success=yes exit=3 a0=865b138 a1=8401 a2=0 a3=8401 items=0 ppid=8583 pid=8589 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="cvs" exe="/usr/bin/cvs" subj=system_u:system_r:cvs_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1200566185.810:2876): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23091 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1200567072.569:2877): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5335 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200567661.335:2878): user pid=19723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200567661.335:2879): user pid=19723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200567661.336:2880): login pid=19723 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200567661.341:2881): user pid=19723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200567661.370:2882): user pid=19723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200567661.370:2883): user pid=19723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200568801.380:2884): user pid=21105 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200568801.380:2885): user pid=21105 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200568801.381:2886): login pid=21105 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200568801.387:2887): user pid=21105 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200569401.158:2888): user pid=25082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200569401.159:2889): user pid=25082 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200569401.159:2890): login pid=25082 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200569401.165:2891): user pid=25082 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200571261.173:2892): user pid=26345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200571261.174:2893): user pid=26345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200571261.174:2894): login pid=26345 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200571261.182:2895): user pid=26345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200571261.187:2896): user pid=26345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200571261.187:2897): user pid=26345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200572350.139:2898): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26647 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200574861.202:2899): user pid=27382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200574861.203:2900): user pid=27382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200574861.203:2901): login pid=27382 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200574861.211:2902): user pid=27382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200574861.216:2903): user pid=27382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200574861.216:2904): user pid=27382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200575701.225:2905): user pid=27616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200575701.225:2906): user pid=27616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200575701.225:2907): login pid=27616 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200575701.232:2908): user pid=27616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200578461.656:2909): user pid=28398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200578461.677:2910): user pid=28398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200578461.677:2911): login pid=28398 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200578461.699:2912): user pid=28398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200578461.722:2913): user pid=28398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200578461.722:2914): user pid=28398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200582061.736:2915): user pid=29451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200582061.736:2916): user pid=29451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200582061.736:2917): login pid=29451 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200582061.743:2918): user pid=29451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200582061.748:2919): user pid=29451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200582061.748:2920): user pid=29451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1200582322.412:2921): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200582322.416:2922): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582325.621:2923): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200582325.626:2924): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200582325.659:2925): user pid=29545 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200582325.660:2926): login pid=29545 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200582325.660:2927): user pid=29545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200582325.662:2928): user pid=29552 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200582326.190:2929): user pid=29545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200582326.191:2930): user pid=29545 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200582343.554:2931): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200582343.559:2932): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582346.646:2933): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200582346.651:2934): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200582346.658:2935): user pid=29592 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200582346.660:2936): login pid=29592 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200582346.660:2937): user pid=29592 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200582346.661:2938): user pid=29596 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200582346.747:2939): user pid=29592 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200582346.748:2940): user pid=29592 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200582383.659:2941): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200582383.663:2942): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582386.590:2943): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200582386.594:2944): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200582386.601:2945): user pid=29644 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200582386.602:2946): login pid=29644 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200582386.602:2947): user pid=29644 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200582386.604:2948): user pid=29651 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200582386.675:2949): user pid=29644 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200582386.675:2950): user pid=29644 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200582407.991:2951): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200582407.996:2952): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582411.535:2953): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200582411.539:2954): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200582411.546:2955): user pid=29691 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200582411.547:2956): login pid=29691 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200582411.547:2957): user pid=29691 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200582411.549:2958): user pid=29696 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200582411.629:2959): user pid=29691 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200582411.630:2960): user pid=29691 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200582595.865:2961): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200582595.870:2962): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582599.095:2963): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200582599.098:2964): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200582599.104:2965): user pid=29788 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200582599.105:2966): login pid=29788 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200582599.105:2967): user pid=29788 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200582599.106:2968): user pid=29792 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200582599.191:2969): user pid=29788 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200582599.191:2970): user pid=29788 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200582934.842:2971): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200582934.847:2972): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582940.059:2973): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=failed)'
>type=USER_LOGIN msg=audit(1200582940.059:2974): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200582943.417:2975): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200582943.421:2976): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200582943.431:2977): user pid=29945 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200582943.433:2978): login pid=29945 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200582943.433:2979): user pid=29945 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200582943.434:2980): user pid=29953 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200582943.518:2981): user pid=29945 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200582943.518:2982): user pid=29945 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200583146.167:2983): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200583146.171:2984): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200583148.881:2985): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200583148.885:2986): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200583148.894:2987): user pid=30048 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200583148.895:2988): login pid=30048 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200583148.895:2989): user pid=30048 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200583148.897:2990): user pid=30052 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200583148.972:2991): user pid=30048 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200583148.972:2992): user pid=30048 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1200583242.567:2993): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1200583242.572:2994): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1200583245.746:2995): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200583245.750:2996): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1200583245.757:2997): user pid=30111 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1200583245.758:2998): login pid=30111 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200583245.758:2999): user pid=30111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1200583245.759:3000): user pid=30115 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1200583245.836:3001): user pid=30111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1200583245.836:3002): user pid=30111 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=192.168.1.1, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1200585661.765:3003): user pid=30874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200585661.766:3004): user pid=30874 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200585661.766:3005): login pid=30874 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200585661.774:3006): user pid=30874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200585661.781:3007): user pid=30874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200585661.781:3008): user pid=30874 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200587087.164:3009): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31711 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200589261.797:3010): user pid=32301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200589261.797:3011): user pid=32301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200589261.797:3012): login pid=32301 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200589261.804:3013): user pid=32301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200589261.810:3014): user pid=32301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200589261.810:3015): user pid=32301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200592861.823:3016): user pid=868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200592861.823:3017): user pid=868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200592861.824:3018): login pid=868 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200592861.827:3019): user pid=868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200592861.832:3020): user pid=868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200592861.832:3021): user pid=868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200596461.847:3022): user pid=1968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200596461.847:3023): user pid=1968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200596461.847:3024): login pid=1968 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200596461.855:3025): user pid=1968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200596461.861:3026): user pid=1968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200596461.861:3027): user pid=1968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200598616.707:3028): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2604 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1200599950.199:3029): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3040 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200600061.875:3030): user pid=3063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200600061.876:3031): user pid=3063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200600061.876:3032): login pid=3063 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200600061.881:3033): user pid=3063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200600061.886:3034): user pid=3063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200600061.886:3035): user pid=3063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200603661.902:3036): user pid=4107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200603661.902:3037): user pid=4107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200603661.903:3038): login pid=4107 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200603661.910:3039): user pid=4107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200603661.915:3040): user pid=4107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200603661.915:3041): user pid=4107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200607261.929:3042): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200607261.930:3043): user pid=5111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200607261.930:3044): login pid=5111 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200607261.938:3045): user pid=5111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200607261.944:3046): user pid=5111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200607261.944:3047): user pid=5111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200609889.532:3048): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5849 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200610861.959:3049): user pid=6139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200610861.959:3050): user pid=6139 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200610861.959:3051): login pid=6139 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200610861.967:3052): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200610861.972:3053): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200610861.972:3054): user pid=6139 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200614461.986:3055): user pid=7114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200614461.987:3056): user pid=7114 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200614461.987:3057): login pid=7114 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200614461.995:3058): user pid=7114 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200614462.001:3059): user pid=7114 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200614462.001:3060): user pid=7114 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200616713.551:3061): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7798 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200618061.016:3062): user pid=8161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200618061.016:3063): user pid=8161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200618061.016:3064): login pid=8161 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200618061.025:3065): user pid=8161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200618061.032:3066): user pid=8161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200618061.032:3067): user pid=8161 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200621661.047:3068): user pid=9191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200621661.048:3069): user pid=9191 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200621661.048:3070): login pid=9191 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200621661.054:3071): user pid=9191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200621661.059:3072): user pid=9191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200621661.059:3073): user pid=9191 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200625261.074:3074): user pid=10195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200625261.074:3075): user pid=10195 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200625261.074:3076): login pid=10195 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200625261.082:3077): user pid=10195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200625261.087:3078): user pid=10195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200625261.088:3079): user pid=10195 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200628861.102:3080): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200628861.102:3081): user pid=11224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200628861.103:3082): login pid=11224 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200628861.110:3083): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200628861.115:3084): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200628861.115:3085): user pid=11224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200632461.129:3086): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200632461.129:3087): user pid=12203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200632461.129:3088): login pid=12203 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200632461.138:3089): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200632461.143:3090): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200632461.143:3091): user pid=12203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200636061.157:3092): user pid=13175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200636061.158:3093): user pid=13175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200636061.158:3094): login pid=13175 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200636061.166:3095): user pid=13175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200636061.171:3096): user pid=13175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200636061.171:3097): user pid=13175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200639661.185:3098): user pid=14149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200639661.186:3099): user pid=14149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200639661.186:3100): login pid=14149 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200639661.192:3101): user pid=14149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200639661.196:3102): user pid=14149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200639661.197:3103): user pid=14149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200643261.210:3104): user pid=15170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200643261.211:3105): user pid=15170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200643261.211:3106): login pid=15170 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200643261.220:3107): user pid=15170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200643261.225:3108): user pid=15170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200643261.225:3109): user pid=15170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200645001.235:3110): user pid=15645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200645001.236:3111): user pid=15645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200645001.236:3112): login pid=15645 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200645001.244:3113): user pid=15645 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200646861.239:3114): user pid=12341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200646861.239:3115): user pid=12341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200646861.239:3116): login pid=12341 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200646861.243:3117): user pid=12341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200646861.250:3118): user pid=12341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200646861.250:3119): user pid=12341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200650461.271:3120): user pid=9618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200650461.271:3121): user pid=9618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200650461.271:3122): login pid=9618 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200650461.279:3123): user pid=9618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200650461.285:3124): user pid=9618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200650461.285:3125): user pid=9618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200650521.292:3126): user pid=9636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200650521.292:3127): user pid=9636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200650521.293:3128): login pid=9636 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200650521.300:3129): user pid=9636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200651191.037:3130): user pid=9636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200651191.037:3131): user pid=9636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200654061.051:3132): user pid=13375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200654061.051:3133): user pid=13375 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200654061.051:3134): login pid=13375 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200654061.058:3135): user pid=13375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200654061.064:3136): user pid=13375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200654061.064:3137): user pid=13375 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200655201.074:3138): user pid=13689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200655201.074:3139): user pid=13689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200655201.074:3140): login pid=13689 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200655201.080:3141): user pid=13689 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200655801.342:3142): user pid=17706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200655801.342:3143): user pid=17706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200655801.343:3144): login pid=17706 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200655801.349:3145): user pid=17706 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200657661.503:3146): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200657661.503:3147): user pid=18969 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200657661.503:3148): login pid=18969 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200657661.512:3149): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200657661.516:3150): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200657661.517:3151): user pid=18969 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200661261.532:3152): user pid=20017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200661261.532:3153): user pid=20017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200661261.532:3154): login pid=20017 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200661261.539:3155): user pid=20017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200661261.545:3156): user pid=20017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200661261.545:3157): user pid=20017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200662101.552:3158): user pid=20248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200662101.553:3159): user pid=20248 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200662101.553:3160): login pid=20248 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200662101.560:3161): user pid=20248 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200664861.713:3162): user pid=21034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200664861.714:3163): user pid=21034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200664861.714:3164): login pid=21034 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200664861.720:3165): user pid=21034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200664861.746:3166): user pid=21034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200664861.746:3167): user pid=21034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200668461.764:3168): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200668461.764:3169): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200668461.765:3170): login pid=22181 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200668461.773:3171): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200668461.778:3172): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200668461.778:3173): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200669407.163:3174): user pid=22476 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200669707.523:3175): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1200669707.527:3176): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1200669707.556:3177): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1200669707.575:3178): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1200669929.765:3179): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1200669929.767:3180): user pid=22565 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=ANOM_ABEND msg=audit(1200670820.257:3181): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22981 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200672061.935:3182): user pid=23323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200672061.935:3183): user pid=23323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200672061.936:3184): login pid=23323 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200672061.936:3185): user pid=23323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200672061.942:3186): user pid=23323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200672061.942:3187): user pid=23323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200675661.956:3188): user pid=24300 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200675661.957:3189): user pid=24300 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200675661.957:3190): login pid=24300 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200675661.958:3191): user pid=24300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200675661.962:3192): user pid=24300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200675661.962:3193): user pid=24300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200676699.133:3194): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24611 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1200678500.376:3195): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=25099 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200679261.977:3196): user pid=25323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200679261.978:3197): user pid=25323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200679261.978:3198): login pid=25323 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200679261.979:3199): user pid=25323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200679261.984:3200): user pid=25323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200679261.985:3201): user pid=25323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200682861.999:3202): user pid=26285 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200682861.999:3203): user pid=26285 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200682861.999:3204): login pid=26285 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200682862.002:3205): user pid=26285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200682862.009:3206): user pid=26285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200682862.010:3207): user pid=26285 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200685405.064:3208): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26992 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200686461.025:3209): user pid=27277 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200686461.026:3210): user pid=27277 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200686461.026:3211): login pid=27277 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200686461.027:3212): user pid=27277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200686461.033:3213): user pid=27277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200686461.033:3214): user pid=27277 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200687120.405:3215): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=27459 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200690061.048:3216): user pid=28593 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200690061.048:3217): user pid=28593 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200690061.048:3218): login pid=28593 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200690061.049:3219): user pid=28593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200690061.055:3220): user pid=28593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200690061.055:3221): user pid=28593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200692577.885:3222): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29289 comm="npviewer.bin" sig=11
>type=ANOM_ABEND msg=audit(1200693367.467:3224): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29585 comm="npviewer.bin" sig=11
>type=ANOM_ABEND msg=audit(1200693367.467:3223): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29584 comm="npviewer.bin" sig=11
>type=USER_ACCT msg=audit(1200693661.071:3225): user pid=29695 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200693661.071:3226): user pid=29695 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200693661.071:3227): login pid=29695 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200693661.073:3228): user pid=29695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200693661.078:3229): user pid=29695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200693661.078:3230): user pid=29695 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200695808.374:3231): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9494 comm="firefox-bin" sig=6
>type=USER_ACCT msg=audit(1200697261.094:3232): user pid=30788 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200697261.095:3233): user pid=30788 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200697261.095:3234): login pid=30788 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200697261.096:3235): user pid=30788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200697261.101:3236): user pid=30788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200697261.101:3237): user pid=30788 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200700861.115:3238): user pid=31777 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200700861.116:3239): user pid=31777 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200700861.116:3240): login pid=31777 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200700861.117:3241): user pid=31777 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200700861.123:3242): user pid=31777 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200700861.123:3243): user pid=31777 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200704461.138:3244): user pid=359 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200704461.138:3245): user pid=359 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200704461.139:3246): login pid=359 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200704461.140:3247): user pid=359 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200704461.145:3248): user pid=359 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200704461.145:3249): user pid=359 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200708061.159:3250): user pid=1348 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200708061.160:3251): user pid=1348 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200708061.160:3252): login pid=1348 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200708061.161:3253): user pid=1348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200708061.167:3254): user pid=1348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200708061.168:3255): user pid=1348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200711661.182:3256): user pid=2358 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200711661.182:3257): user pid=2358 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200711661.182:3258): login pid=2358 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200711661.184:3259): user pid=2358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200711661.189:3260): user pid=2358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200711661.189:3261): user pid=2358 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200715261.203:3262): user pid=3482 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200715261.204:3263): user pid=3482 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200715261.204:3264): login pid=3482 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200715261.205:3265): user pid=3482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200715261.211:3266): user pid=3482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200715261.211:3267): user pid=3482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200718861.226:3268): user pid=4686 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200718861.226:3269): user pid=4686 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200718861.226:3270): login pid=4686 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200718861.228:3271): user pid=4686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200718861.234:3272): user pid=4686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200718861.234:3273): user pid=4686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200722461.248:3274): user pid=5671 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200722461.249:3275): user pid=5671 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200722461.249:3276): login pid=5671 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200722461.250:3277): user pid=5671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200722461.255:3278): user pid=5671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200722461.255:3279): user pid=5671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200726061.269:3280): user pid=6581 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200726061.269:3281): user pid=6581 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200726061.269:3282): login pid=6581 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200726061.270:3283): user pid=6581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200726061.275:3284): user pid=6581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200726061.276:3285): user pid=6581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200729661.289:3286): user pid=7547 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200729661.290:3287): user pid=7547 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200729661.290:3288): login pid=7547 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200729661.291:3289): user pid=7547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200729661.296:3290): user pid=7547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200729661.296:3291): user pid=7547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200733261.310:3292): user pid=8468 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200733261.310:3293): user pid=8468 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200733261.310:3294): login pid=8468 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200733261.311:3295): user pid=8468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200733261.316:3296): user pid=8468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200733261.316:3297): user pid=8468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200736861.330:3298): user pid=9419 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200736861.330:3299): user pid=9419 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200736861.331:3300): login pid=9419 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200736861.332:3301): user pid=9419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200736861.336:3302): user pid=9419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200736861.337:3303): user pid=9419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200736921.344:3304): user pid=9433 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200736921.344:3305): user pid=9433 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200736921.344:3306): login pid=9433 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200736921.345:3307): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200737472.242:3308): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200737472.242:3309): user pid=9433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200738130.744:3310): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_ACCT msg=audit(1200738130.747:3311): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_START msg=audit(1200738130.762:3312): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_ACQ msg=audit(1200738130.762:3313): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=CRED_DISP msg=audit(1200738370.360:3314): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=USER_END msg=audit(1200738370.360:3315): user pid=10393 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/16 res=success)'
>type=ANOM_ABEND msg=audit(1200739098.036:3316): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10723 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200740461.257:3317): user pid=11091 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200740461.257:3318): user pid=11091 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200740461.257:3319): login pid=11091 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200740461.258:3320): user pid=11091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200740461.263:3321): user pid=11091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200740461.264:3322): user pid=11091 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200741601.273:3323): user pid=11405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200741601.274:3324): user pid=11405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200741601.274:3325): login pid=11405 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1200741601.275:3326): user pid=11405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200742201.375:3327): user pid=15360 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200742201.375:3328): user pid=15360 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200742201.376:3329): login pid=15360 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1200742201.376:3330): user pid=15360 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200744061.461:3331): user pid=16603 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200744061.461:3332): user pid=16603 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200744061.461:3333): login pid=16603 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200744061.463:3334): user pid=16603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200744061.468:3335): user pid=16603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200744061.468:3336): user pid=16603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200745119.094:3337): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16899 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200747661.483:3338): user pid=17616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200747661.484:3339): user pid=17616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200747661.484:3340): login pid=17616 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200747661.485:3341): user pid=17616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200747661.491:3342): user pid=17616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200747661.492:3343): user pid=17616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200748501.501:3344): user pid=17847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200748501.501:3345): user pid=17847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200748501.501:3346): login pid=17847 uid=0 old auid=500 new auid=500
>type=USER_START msg=audit(1200748501.502:3347): user pid=17847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200751261.585:3348): user pid=18613 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200751261.586:3349): user pid=18613 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200751261.586:3350): login pid=18613 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200751261.596:3351): user pid=18613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200751261.618:3352): user pid=18613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200751261.619:3353): user pid=18613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200754861.682:3354): user pid=19610 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200754861.683:3355): user pid=19610 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200754861.683:3356): login pid=19610 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200754861.684:3357): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200754861.691:3358): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200754861.691:3359): user pid=19610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200758461.705:3360): user pid=20594 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200758461.706:3361): user pid=20594 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200758461.706:3362): login pid=20594 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200758461.707:3363): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200758461.712:3364): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200758461.713:3365): user pid=20594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200762061.727:3366): user pid=21589 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200762061.727:3367): user pid=21589 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200762061.727:3368): login pid=21589 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200762061.728:3369): user pid=21589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200762061.734:3370): user pid=21589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200762061.734:3371): user pid=21589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200762943.898:3372): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21837 comm="f-spot" sig=6
>type=AVC msg=audit(1200763426.701:3373): avc:  denied  { getattr } for  pid=19468 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200763426.701:3373): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200763426.701:3374): avc:  denied  { read } for  pid=19468 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1200763426.701:3374): arch=40000003 syscall=5 success=yes exit=18 a0=b8fa3470 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19468 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200763439.873:3375): avc:  denied  { getattr } for  pid=19470 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=47710275 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200763439.873:3375): arch=40000003 syscall=196 success=yes exit=0 a0=bfbeeb68 a1=bfbeeabc a2=52bff4 a3=171 items=0 ppid=2632 pid=19470 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1200763455.400:3376): avc:  denied  { read } for  pid=19467 comm="httpd" name="m4v01187.thm" dev=dm-0 ino=57835549 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1200763455.400:3376): arch=40000003 syscall=5 success=yes exit=18 a0=b8f9f4e0 a1=8000 a2=1b6 a3=8000 items=0 ppid=2632 pid=19467 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200765661.748:3377): user pid=22614 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200765661.749:3378): user pid=22614 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200765661.749:3379): login pid=22614 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200765661.750:3380): user pid=22614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200765661.755:3381): user pid=22614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200765661.755:3382): user pid=22614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200769261.770:3383): user pid=23672 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200769261.771:3384): user pid=23672 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200769261.771:3385): login pid=23672 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200769261.772:3386): user pid=23672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200769261.778:3387): user pid=23672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200769261.778:3388): user pid=23672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200772861.792:3389): user pid=24653 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200772861.792:3390): user pid=24653 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200772861.793:3391): login pid=24653 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200772861.794:3392): user pid=24653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200772861.799:3393): user pid=24653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200772861.799:3394): user pid=24653 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200776461.815:3395): user pid=25718 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200776461.815:3396): user pid=25718 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200776461.815:3397): login pid=25718 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200776461.817:3398): user pid=25718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200776461.823:3399): user pid=25718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200776461.823:3400): user pid=25718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200776706.731:3401): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200776706.734:3402): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1200776706.778:3403): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1200776706.796:3404): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1200776828.397:3405): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1200776828.398:3406): user pid=25789 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1200776860.068:3407): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200776860.072:3408): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1200776860.085:3409): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1200776860.085:3410): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.328:3411): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.332:3412): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.371:3413): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.375:3414): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1200778267.379:3415): avc:  denied  { getattr } for  pid=26566 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200778267.379:3415): arch=40000003 syscall=229 success=yes exit=33 a0=b8d07588 a1=32d723 a2=b8d06ca0 a3=ff items=0 ppid=26565 pid=26566 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.380:3416): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.384:3417): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.414:3418): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200778267.420:3419): user pid=26566 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1200779183.026:3420): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26873 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200780061.840:3421): user pid=27121 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200780061.841:3422): user pid=27121 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200780061.841:3423): login pid=27121 uid=0 old auid=500 new auid=0
>type=USER_START msg=audit(1200780061.842:3424): user pid=27121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200780061.850:3425): user pid=27121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200780061.850:3426): user pid=27121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200781440.140:3427): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3318 comm="exe" sig=6
>type=CRED_DISP msg=audit(1200781440.252:3428): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1200781440.254:3429): user pid=25884 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1200781441.343:3430): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1200781441.344:3431): user pid=3164 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1200781444.335:3432): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3086 comm="gdm-binary" sig=11
>type=DAEMON_END msg=audit(1200781461.419:7758): auditd normal halt, sending auid=4294967295 pid=28179 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1977
>type=DAEMON_START msg=audit(1200781519.908:3810): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1960 res=success, auditd pid=1960
>type=CONFIG_CHANGE msg=audit(1200781520.008:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200781520.008:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200781520.041:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200781520.041:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1200781534.041:8): avc:  denied  { write } for  pid=2454 comm="rpc.mountd" name="control" dev=tmpfs ino=286 scontext=system_u:system_r:nfsd_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200781534.041:8): arch=40000003 syscall=5 success=yes exit=9 a0=bf8d2a14 a1=8002 a2=0 a3=8002 items=0 ppid=1 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.mountd" exe="/usr/sbin/rpc.mountd" subj=system_u:system_r:nfsd_t:s0 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1200781541.762:9): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200781541.911:10): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200781542.059:11): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200781542.063:12): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1200781542.108:13): avc:  denied  { getattr } for  pid=2967 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1200781542.108:13): arch=40000003 syscall=229 success=yes exit=33 a0=b9aa7588 a1=32d723 a2=b9aa6ca0 a3=ff items=0 ppid=2966 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1200781542.202:14): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200781542.216:15): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200781542.327:16): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1200781542.351:17): user pid=2967 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200781564.419:18): user pid=3233 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1200781564.427:19): user pid=3233 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1200781564.428:20): user pid=3233 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1200781564.435:21): login pid=3233 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1200781564.460:22): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200781564.513:23): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1200781564.514:24): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1200782867.016:25): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5013 comm="rarian-sk-get-c" sig=11
>type=USER_ACCT msg=audit(1200783661.906:26): user pid=6544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200783661.906:27): user pid=6544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200783661.906:28): login pid=6544 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200783661.914:29): user pid=6544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200783661.960:30): user pid=6544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200783661.960:31): user pid=6544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200787261.974:32): user pid=7594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200787261.975:33): user pid=7594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200787261.975:34): login pid=7594 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200787261.981:35): user pid=7594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200787261.986:36): user pid=7594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200787261.986:37): user pid=7594 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200790861.999:38): user pid=8587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200790861.999:39): user pid=8587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200790862.000:40): login pid=8587 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200790862.007:41): user pid=8587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200790862.012:42): user pid=8587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200790862.013:43): user pid=8587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200794372.198:44): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9554 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200794461.025:45): user pid=9581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200794461.026:46): user pid=9581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200794461.026:47): login pid=9581 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200794461.034:48): user pid=9581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200794461.038:49): user pid=9581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200794461.039:50): user pid=9581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200794885.557:51): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9699 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200798061.052:52): user pid=10585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200798061.052:53): user pid=10585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200798061.052:54): login pid=10585 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200798061.058:55): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200798061.063:56): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200798061.063:57): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200801661.077:58): user pid=11561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200801661.077:59): user pid=11561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200801661.077:60): login pid=11561 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200801661.085:61): user pid=11561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200801661.090:62): user pid=11561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200801661.090:63): user pid=11561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200805261.103:64): user pid=12544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200805261.103:65): user pid=12544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200805261.103:66): login pid=12544 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200805261.109:67): user pid=12544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200805261.114:68): user pid=12544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200805261.114:69): user pid=12544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200808861.133:70): user pid=13529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200808861.134:71): user pid=13529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200808861.134:72): login pid=13529 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200808861.140:73): user pid=13529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200808861.145:74): user pid=13529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200808861.145:75): user pid=13529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200812461.161:76): user pid=14378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200812461.161:77): user pid=14378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200812461.162:78): login pid=14378 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200812461.170:79): user pid=14378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200812461.175:80): user pid=14378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200812461.175:81): user pid=14378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200813254.258:82): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14601 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200816061.189:83): user pid=15365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200816061.189:84): user pid=15365 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200816061.190:85): login pid=15365 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200816061.198:86): user pid=15365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200816061.203:87): user pid=15365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200816061.203:88): user pid=15365 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200819661.216:89): user pid=16338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200819661.216:90): user pid=16338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200819661.216:91): login pid=16338 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200819661.223:92): user pid=16338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200819661.228:93): user pid=16338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200819661.228:94): user pid=16338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200823261.240:95): user pid=17316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200823261.241:96): user pid=17316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200823261.241:97): login pid=17316 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200823261.246:98): user pid=17316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200823261.251:99): user pid=17316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200823261.251:100): user pid=17316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200823321.256:101): user pid=17337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200823321.257:102): user pid=17337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200823321.257:103): login pid=17337 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200823321.264:104): user pid=17337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200823925.134:105): user pid=17337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200823925.135:106): user pid=17337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200824521.143:107): user pid=18429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200824521.144:108): user pid=18429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200824521.144:109): login pid=18429 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200824521.154:110): user pid=18429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200825295.931:111): user pid=18429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200825295.931:112): user pid=18429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200826861.940:113): user pid=24155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200826861.940:114): user pid=24155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200826861.941:115): login pid=24155 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200826861.951:116): user pid=24155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200826861.957:117): user pid=24155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200826861.957:118): user pid=24155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200828001.966:119): user pid=24498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200828001.966:120): user pid=24498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200828001.966:121): login pid=24498 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200828001.975:122): user pid=24498 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200828601.344:123): user pid=28533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200828601.344:124): user pid=28533 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200828601.344:125): login pid=28533 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200828601.353:126): user pid=28533 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200829823.383:127): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200829823.383:128): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200829823.469:129): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200829929.010:130): user pid=29648 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200830461.822:131): user pid=30158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200830461.822:132): user pid=30158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200830461.822:133): login pid=30158 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200830461.832:134): user pid=30158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200830461.836:135): user pid=30158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200830461.837:136): user pid=30158 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200830712.269:137): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200830712.271:138): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1200830712.288:139): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1200830712.288:140): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1200830873.646:141): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1200830873.647:142): user pid=30231 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1200830910.064:143): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200830910.067:144): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1200830910.083:145): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1200830910.083:146): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1200830959.422:147): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1200830959.422:148): user pid=30337 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1200834061.851:149): user pid=31296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200834061.852:150): user pid=31296 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200834061.852:151): login pid=31296 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200834061.856:152): user pid=31296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200834061.861:153): user pid=31296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200834061.861:154): user pid=31296 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200834901.869:155): user pid=31537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200834901.869:156): user pid=31537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200834901.869:157): login pid=31537 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200834901.876:158): user pid=31537 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200837661.432:159): user pid=32328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200837661.432:160): user pid=32328 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200837661.433:161): login pid=32328 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200837661.439:162): user pid=32328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200837661.444:163): user pid=32328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200837661.444:164): user pid=32328 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200841261.457:165): user pid=851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200841261.458:166): user pid=851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200841261.458:167): login pid=851 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200841261.464:168): user pid=851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200841261.469:169): user pid=851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200841261.470:170): user pid=851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200844861.483:171): user pid=1867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200844861.484:172): user pid=1867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200844861.484:173): login pid=1867 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200844861.492:174): user pid=1867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200844861.496:175): user pid=1867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200844861.496:176): user pid=1867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200848461.511:177): user pid=12397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200848461.512:178): user pid=12397 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200848461.512:179): login pid=12397 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200848461.521:180): user pid=12397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200848461.525:181): user pid=12397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200848461.526:182): user pid=12397 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200852048.404:183): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13467 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200852061.539:184): user pid=13473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200852061.539:185): user pid=13473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200852061.540:186): login pid=13473 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200852061.547:187): user pid=13473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200852061.552:188): user pid=13473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200852061.552:189): user pid=13473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200854631.364:190): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200854631.364:191): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200854631.402:192): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200854685.689:193): user pid=14188 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200855661.566:194): user pid=14506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200855661.567:195): user pid=14506 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200855661.567:196): login pid=14506 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200855661.574:197): user pid=14506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200855661.578:198): user pid=14506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200855661.578:199): user pid=14506 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200856216.963:200): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14666 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200859261.591:201): user pid=15507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200859261.592:202): user pid=15507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200859261.592:203): login pid=15507 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200859261.599:204): user pid=15507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200859261.603:205): user pid=15507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200859261.604:206): user pid=15507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200862861.618:207): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200862861.618:208): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200862861.619:209): login pid=16592 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200862861.629:210): user pid=16592 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200862861.633:211): user pid=16592 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200862861.634:212): user pid=16592 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200866461.646:213): user pid=17561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200866461.647:214): user pid=17561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200866461.647:215): login pid=17561 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200866461.655:216): user pid=17561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200866461.660:217): user pid=17561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200866461.660:218): user pid=17561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200870061.673:219): user pid=18567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200870061.673:220): user pid=18567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200870061.674:221): login pid=18567 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200870061.680:222): user pid=18567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200870061.685:223): user pid=18567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200870061.685:224): user pid=18567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200873661.698:225): user pid=19573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200873661.699:226): user pid=19573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200873661.700:227): login pid=19573 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200873661.705:228): user pid=19573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200873661.711:229): user pid=19573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200873661.711:230): user pid=19573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200877261.726:231): user pid=20579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200877261.727:232): user pid=20579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200877261.727:233): login pid=20579 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200877261.735:234): user pid=20579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200877261.740:235): user pid=20579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200877261.740:236): user pid=20579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200877511.650:237): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=20649 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1200879805.635:238): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=21287 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200880861.753:239): user pid=21588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200880861.753:240): user pid=21588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200880861.754:241): login pid=21588 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200880861.759:242): user pid=21588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200880861.764:243): user pid=21588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200880861.764:244): user pid=21588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200884461.780:245): user pid=22706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200884461.781:246): user pid=22706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200884461.781:247): login pid=22706 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200884461.790:248): user pid=22706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200884461.796:249): user pid=22706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200884461.796:250): user pid=22706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200888061.811:251): user pid=23711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200888061.811:252): user pid=23711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200888061.811:253): login pid=23711 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200888061.815:254): user pid=23711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200888061.820:255): user pid=23711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200888061.820:256): user pid=23711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200891661.833:257): user pid=24699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200891661.833:258): user pid=24699 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200891661.834:259): login pid=24699 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200891661.841:260): user pid=24699 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200891661.846:261): user pid=24699 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200891661.846:262): user pid=24699 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200895261.859:263): user pid=25685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200895261.859:264): user pid=25685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200895261.859:265): login pid=25685 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200895261.866:266): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200895261.870:267): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200895261.870:268): user pid=25685 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200898861.883:269): user pid=27174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200898861.884:270): user pid=27174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200898861.885:271): login pid=27174 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200898861.889:272): user pid=27174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200898861.894:273): user pid=27174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200898861.895:274): user pid=27174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200902461.908:275): user pid=28826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200902461.909:276): user pid=28826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200902461.910:277): login pid=28826 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200902461.914:278): user pid=28826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200902461.922:279): user pid=28826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200902461.922:280): user pid=28826 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200903337.408:281): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=29076 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200904201.932:282): user pid=29322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200904201.932:283): user pid=29322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200904201.932:284): login pid=29322 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200904201.940:285): user pid=29322 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200906061.947:286): user pid=25747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200906061.947:287): user pid=25747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200906061.948:288): login pid=25747 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200906061.953:289): user pid=25747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200906061.959:290): user pid=25747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200906061.959:291): user pid=25747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200909661.654:292): user pid=22747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200909661.655:293): user pid=22747 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200909661.655:294): login pid=22747 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200909661.661:295): user pid=22747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200909661.666:296): user pid=22747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200909661.666:297): user pid=22747 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200909721.671:298): user pid=22769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200909721.672:299): user pid=22769 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200909721.672:300): login pid=22769 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200909721.678:301): user pid=22769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200910264.971:302): user pid=22769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200910264.972:303): user pid=22769 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200913261.987:304): user pid=24488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200913261.988:305): user pid=24488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200913261.988:306): login pid=24488 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200913261.995:307): user pid=24488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200913262.002:308): user pid=24488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200913262.002:309): user pid=24488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200914401.010:310): user pid=24798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200914401.010:311): user pid=24798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200914401.010:312): login pid=24798 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200914401.013:313): user pid=24798 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200914435.732:314): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=26432 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200915001.955:315): user pid=28831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200915001.956:316): user pid=28831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200915001.956:317): login pid=28831 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200915001.961:318): user pid=28831 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200916153.567:319): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)'
>type=USER_ACCT msg=audit(1200916153.570:320): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)'
>type=USER_START msg=audit(1200916153.586:321): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)'
>type=CRED_ACQ msg=audit(1200916153.600:322): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)'
>type=CRED_DISP msg=audit(1200916274.535:323): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)'
>type=USER_END msg=audit(1200916274.535:324): user pid=29919 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/20 res=success)'
>type=USER_ACCT msg=audit(1200916861.940:325): user pid=30183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200916861.941:326): user pid=30183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200916861.941:327): login pid=30183 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200916861.946:328): user pid=30183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200916861.951:329): user pid=30183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200916861.951:330): user pid=30183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200920461.966:331): user pid=31286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200920461.968:332): user pid=31286 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200920461.968:333): login pid=31286 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200920461.977:334): user pid=31286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200920461.982:335): user pid=31286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200920461.983:336): user pid=31286 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200921301.990:337): user pid=31526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200921301.991:338): user pid=31526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200921301.991:339): login pid=31526 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1200921301.996:340): user pid=31526 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200924061.998:341): user pid=32288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200924061.999:342): user pid=32288 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200924061.999:343): login pid=32288 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200924062.006:344): user pid=32288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200924062.011:345): user pid=32288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200924062.011:346): user pid=32288 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200927661.982:347): user pid=839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200927661.982:348): user pid=839 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200927661.983:349): login pid=839 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200927661.989:350): user pid=839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200927661.995:351): user pid=839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200927661.995:352): user pid=839 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200931261.009:353): user pid=1842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200931261.010:354): user pid=1842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200931261.010:355): login pid=1842 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200931261.017:356): user pid=1842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200931261.022:357): user pid=1842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200931261.022:358): user pid=1842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200934861.035:359): user pid=3020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200934861.036:360): user pid=3020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200934861.036:361): login pid=3020 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200934861.041:362): user pid=3020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200934861.046:363): user pid=3020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200934861.046:364): user pid=3020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200938461.064:365): user pid=5840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200938461.064:366): user pid=5840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200938461.064:367): login pid=5840 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200938461.067:368): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200938461.073:369): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200938461.073:370): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200942061.089:371): user pid=10519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200942061.090:372): user pid=10519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200942061.090:373): login pid=10519 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200942061.096:374): user pid=10519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200942061.102:375): user pid=10519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200942061.102:376): user pid=10519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200945661.115:377): user pid=11560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200945661.116:378): user pid=11560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200945661.116:379): login pid=11560 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200945661.123:380): user pid=11560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200945661.129:381): user pid=11560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200945661.129:382): user pid=11560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200949261.142:383): user pid=12555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200949261.142:384): user pid=12555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200949261.143:385): login pid=12555 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200949261.148:386): user pid=12555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200949261.153:387): user pid=12555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200949261.153:388): user pid=12555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200952861.168:389): user pid=13544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200952861.168:390): user pid=13544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200952861.168:391): login pid=13544 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200952861.173:392): user pid=13544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200952861.178:393): user pid=13544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200952861.178:394): user pid=13544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200956461.191:395): user pid=14526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200956461.192:396): user pid=14526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200956461.192:397): login pid=14526 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200956461.201:398): user pid=14526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200956461.206:399): user pid=14526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200956461.206:400): user pid=14526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200960061.218:401): user pid=15518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200960061.219:402): user pid=15518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200960061.219:403): login pid=15518 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200960061.226:404): user pid=15518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200960061.231:405): user pid=15518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200960061.231:406): user pid=15518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200963661.245:407): user pid=16553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200963661.246:408): user pid=16553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200963661.246:409): login pid=16553 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200963661.253:410): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200963661.258:411): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200963661.258:412): user pid=16553 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200966700.386:413): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17431 comm="npviewer.bin" sig=11
>type=USER_ACCT msg=audit(1200967261.272:414): user pid=17617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200967261.272:415): user pid=17617 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200967261.272:416): login pid=17617 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200967261.280:417): user pid=17617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200967261.286:418): user pid=17617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200967261.286:419): user pid=17617 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200967902.744:420): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17806 comm="f-spot" sig=6
>type=ANOM_ABEND msg=audit(1200968655.811:421): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18027 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200970861.299:422): user pid=18651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200970861.300:423): user pid=18651 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200970861.300:424): login pid=18651 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200970861.305:425): user pid=18651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200970861.310:426): user pid=18651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200970861.311:427): user pid=18651 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200972579.815:428): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19164 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200974461.325:429): user pid=19693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200974461.326:430): user pid=19693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200974461.326:431): login pid=19693 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200974461.334:432): user pid=19693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200974461.339:433): user pid=19693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200974461.340:434): user pid=19693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200978061.352:435): user pid=20677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200978061.352:436): user pid=20677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200978061.353:437): login pid=20677 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200978061.358:438): user pid=20677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200978061.363:439): user pid=20677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200978061.363:440): user pid=20677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200981661.377:441): user pid=21664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200981661.377:442): user pid=21664 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200981661.378:443): login pid=21664 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200981661.382:444): user pid=21664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200981661.388:445): user pid=21664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200981661.388:446): user pid=21664 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200985261.400:447): user pid=22647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200985261.401:448): user pid=22647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200985261.401:449): login pid=22647 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200985261.407:450): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200985261.412:451): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200985261.412:452): user pid=22647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200988861.426:453): user pid=23634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200988861.427:454): user pid=23634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200988861.427:455): login pid=23634 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200988861.434:456): user pid=23634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200988861.439:457): user pid=23634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200988861.439:458): user pid=23634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200992279.915:459): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24584 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200992461.453:460): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200992461.453:461): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200992461.453:462): login pid=24636 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200992461.457:463): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200992461.462:464): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200992461.463:465): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1200992685.837:466): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=24697 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1200996061.480:467): user pid=26305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200996061.481:468): user pid=26305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200996061.482:469): login pid=26305 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200996061.490:470): user pid=26305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200996061.496:471): user pid=26305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200996061.496:472): user pid=26305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200996121.503:473): user pid=26325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200996121.503:474): user pid=26325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200996121.504:475): login pid=26325 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200996121.512:476): user pid=26325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200996648.595:477): user pid=26325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200996648.595:478): user pid=26325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1200999661.610:479): user pid=28132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200999661.611:480): user pid=28132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200999661.611:481): login pid=28132 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200999661.619:482): user pid=28132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200999661.624:483): user pid=28132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200999661.624:484): user pid=28132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201000801.633:485): user pid=28443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201000801.635:486): user pid=28443 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201000801.635:487): login pid=28443 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201000801.641:488): user pid=28443 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201001401.773:489): user pid=32444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201001401.774:490): user pid=32444 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201001401.774:491): login pid=32444 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201001401.782:492): user pid=32444 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201003261.451:493): user pid=1253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201003261.452:494): user pid=1253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201003261.452:495): login pid=1253 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201003261.460:496): user pid=1253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201003261.465:497): user pid=1253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201003261.465:498): user pid=1253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201005563.990:499): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201005563.993:500): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201005564.025:501): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201005564.026:502): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_DISP msg=audit(1201005719.194:503): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201005719.195:504): user pid=1953 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_AUTH msg=audit(1201005730.527:505): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201005730.531:506): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201005730.547:507): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201005730.548:508): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201005730.549:509): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_CMD msg=audit(1201005730.549:510): user pid=2054 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/rick" cmd="/bin/ls" (terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201005739.883:511): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201005739.885:512): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201005739.886:513): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_CMD msg=audit(1201005739.887:514): user pid=2061 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/rick" cmd="/bin/ls" (terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201006861.480:515): user pid=2416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201006861.480:516): user pid=2416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201006861.480:517): login pid=2416 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201006861.485:518): user pid=2416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201006861.490:519): user pid=2416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201006861.490:520): user pid=2416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201007701.499:521): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201007701.500:522): user pid=2674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201007701.500:523): login pid=2674 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201007701.506:524): user pid=2674 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201010461.453:525): user pid=3621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201010461.454:526): user pid=3621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201010461.454:527): login pid=3621 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201010461.462:528): user pid=3621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201010461.494:529): user pid=3621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201010461.494:530): user pid=3621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201014061.510:531): user pid=4713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201014061.511:532): user pid=4713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201014061.511:533): login pid=4713 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201014061.520:534): user pid=4713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201014061.525:535): user pid=4713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201014061.525:536): user pid=4713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201016750.449:537): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201016750.452:538): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201016750.519:539): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201016750.519:540): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_DISP msg=audit(1201016756.152:541): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201016756.153:542): user pid=5557 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_AUTH msg=audit(1201016793.049:543): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201016793.052:544): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201016793.060:545): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201016793.060:546): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_DISP msg=audit(1201016797.044:547): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201016797.044:548): user pid=5576 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201017661.541:549): user pid=5845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201017661.541:550): user pid=5845 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201017661.542:551): login pid=5845 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201017661.550:552): user pid=5845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201017661.555:553): user pid=5845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201017661.555:554): user pid=5845 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201021261.570:555): user pid=6901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201021261.571:556): user pid=6901 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201021261.571:557): login pid=6901 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201021261.576:558): user pid=6901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201021261.581:559): user pid=6901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201021261.581:560): user pid=6901 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201021639.132:561): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7474 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1201021678.483:562): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7543 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1201021880.295:563): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7623 comm="gs" sig=11
>type=USER_ACCT msg=audit(1201024861.598:564): user pid=8631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201024861.599:565): user pid=8631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201024861.599:566): login pid=8631 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201024861.607:567): user pid=8631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201024861.613:568): user pid=8631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201024861.613:569): user pid=8631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201028461.628:570): user pid=9677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201028461.628:571): user pid=9677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201028461.628:572): login pid=9677 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201028461.638:573): user pid=9677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201028461.643:574): user pid=9677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201028461.643:575): user pid=9677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201032061.655:576): user pid=10677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201032061.656:577): user pid=10677 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201032061.656:578): login pid=10677 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201032061.663:579): user pid=10677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201032061.668:580): user pid=10677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201032061.668:581): user pid=10677 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201033569.304:582): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201033569.304:583): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201033569.315:584): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201035035.930:585): user pid=11675 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1201035153.472:586): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201035153.332:587): policy loaded auid=500
>type=SYSCALL msg=audit(1201035153.332:587): arch=40000003 syscall=4 success=yes exit=3998501 a0=4 a1=b7b6d000 a2=3d0325 a3=bfdfa2e8 items=0 ppid=11828 pid=11839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201035265.614:588): user pid=12034 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201035267.448:589): user pid=12038 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201035280.391:590): user pid=12039 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201035282.189:591): user pid=12045 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201035284.037:592): user pid=12046 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201035296.918:593): user pid=12047 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_END msg=audit(1201035333.430:3811): auditd normal halt, sending auid=500 pid=12138 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1960
>type=DAEMON_START msg=audit(1201035333.595:8201): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=500 pid=12154 res=success
>type=CONFIG_CHANGE msg=audit(1201035333.695:596): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201035333.695:597): audit_enabled=1 old=1 by auid=500 res=1
>type=CONFIG_CHANGE msg=audit(1201035333.699:598): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201035333.699:599): audit_backlog_limit=320 old=320 by auid=500 res=1
>type=USER_END msg=audit(1201035402.180:600): user pid=11209 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201035661.686:601): user pid=12271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201035661.687:602): user pid=12271 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201035661.687:603): login pid=12271 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201035661.694:604): user pid=12271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201035661.699:605): user pid=12271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201035661.699:606): user pid=12271 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201039070.152:607): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14100 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201039261.715:608): user pid=14154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201039261.716:609): user pid=14154 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201039261.716:610): login pid=14154 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201039261.723:611): user pid=14154 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201039261.729:612): user pid=14154 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201039261.729:613): user pid=14154 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201042861.744:614): user pid=15341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201042861.745:615): user pid=15341 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201042861.745:616): login pid=15341 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201042861.752:617): user pid=15341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201042861.758:618): user pid=15341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201042861.759:619): user pid=15341 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201046461.774:620): user pid=16409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201046461.774:621): user pid=16409 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201046461.774:622): login pid=16409 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201046461.782:623): user pid=16409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201046461.788:624): user pid=16409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201046461.788:625): user pid=16409 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201049612.254:626): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=17267 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201050061.802:627): user pid=17391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201050061.802:628): user pid=17391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201050061.803:629): login pid=17391 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201050061.810:630): user pid=17391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201050061.815:631): user pid=17391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201050061.816:632): user pid=17391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201053661.831:633): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201053661.831:634): user pid=18432 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201053661.831:635): login pid=18432 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201053661.840:636): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201053661.846:637): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201053661.846:638): user pid=18432 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201054306.531:639): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18606 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201057261.860:640): user pid=19405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201057261.861:641): user pid=19405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201057261.861:642): login pid=19405 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201057261.870:643): user pid=19405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201057261.874:644): user pid=19405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201057261.875:645): user pid=19405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201057545.898:646): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19482 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201060861.890:647): user pid=20474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201060861.890:648): user pid=20474 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201060861.891:649): login pid=20474 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201060861.896:650): user pid=20474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201060861.900:651): user pid=20474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201060861.900:652): user pid=20474 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201064461.915:653): user pid=21616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201064461.916:654): user pid=21616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201064461.916:655): login pid=21616 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201064461.924:656): user pid=21616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201064461.930:657): user pid=21616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201064461.930:658): user pid=21616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201068061.944:659): user pid=22596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201068061.945:660): user pid=22596 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201068061.945:661): login pid=22596 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201068061.954:662): user pid=22596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201068061.959:663): user pid=22596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201068061.959:664): user pid=22596 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201071661.973:665): user pid=23559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201071661.973:666): user pid=23559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201071661.973:667): login pid=23559 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201071661.982:668): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201071661.987:669): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201071661.987:670): user pid=23559 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201075262.001:671): user pid=24528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201075262.002:672): user pid=24528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201075262.002:673): login pid=24528 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201075262.009:674): user pid=24528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201075262.013:675): user pid=24528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201075262.013:676): user pid=24528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201077001.024:677): user pid=24994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201077001.024:678): user pid=24994 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201077001.025:679): login pid=24994 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201077001.028:680): user pid=24994 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201077932.664:681): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4855 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201078861.027:682): user pid=21416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201078861.028:683): user pid=21416 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201078861.028:684): login pid=21416 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201078861.033:685): user pid=21416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201078861.039:686): user pid=21416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201078861.039:687): user pid=21416 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201081559.985:688): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18198 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201082461.354:689): user pid=18442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201082461.355:690): user pid=18442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201082461.355:691): login pid=18442 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201082461.360:692): user pid=18442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201082461.366:693): user pid=18442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201082461.366:694): user pid=18442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201082521.373:695): user pid=18461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201082521.374:696): user pid=18461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201082521.374:697): login pid=18461 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201082521.382:698): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201083223.803:699): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201083223.803:700): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201086061.817:701): user pid=25968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201086061.818:702): user pid=25968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201086061.818:703): login pid=25968 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201086061.826:704): user pid=25968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201086061.833:705): user pid=25968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201086061.833:706): user pid=25968 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201087201.842:707): user pid=26279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201087201.843:708): user pid=26279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201087201.843:709): login pid=26279 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201087201.852:710): user pid=26279 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201087801.493:711): user pid=30204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201087801.493:712): user pid=30204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201087801.493:713): login pid=30204 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201087801.502:714): user pid=30204 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201089661.797:715): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201089661.798:716): user pid=31481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201089661.798:717): login pid=31481 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201089661.807:718): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201089661.813:719): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201089661.813:720): user pid=31481 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201093261.827:721): user pid=32512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201093261.828:722): user pid=32512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201093261.828:723): login pid=32512 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201093261.833:724): user pid=32512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201093261.839:725): user pid=32512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201093261.839:726): user pid=32512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201094101.848:727): user pid=32740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201094101.849:728): user pid=32740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201094101.849:729): login pid=32740 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201094101.856:730): user pid=32740 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201096861.629:731): user pid=1057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201096861.630:732): user pid=1057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201096861.630:733): login pid=1057 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201096861.638:734): user pid=1057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201096861.661:735): user pid=1057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201096861.662:736): user pid=1057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201100461.676:737): user pid=2146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201100461.677:738): user pid=2146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201100461.677:739): login pid=2146 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201100461.686:740): user pid=2146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201100461.692:741): user pid=2146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201100461.692:742): user pid=2146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201101052.785:743): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1201101052.830:744): user pid=2340 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=LOGIN msg=audit(1201101052.832:745): login pid=2340 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201101052.833:746): user pid=2340 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1201101052.834:747): user pid=2344 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1201101056.048:748): user pid=2340 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_END msg=audit(1201101056.048:749): user pid=2340 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201104061.708:750): user pid=3680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201104061.709:751): user pid=3680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201104061.709:752): login pid=3680 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201104061.715:753): user pid=3680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201104061.721:754): user pid=3680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201104061.721:755): user pid=3680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.214:756): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.218:757): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.263:758): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.271:759): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201104934.274:760): avc:  denied  { getattr } for  pid=4008 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201104934.274:760): arch=40000003 syscall=229 success=yes exit=33 a0=4199c588 a1=402a6723 a2=4199bca0 a3=ff items=0 ppid=4007 pid=4008 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.275:761): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.284:762): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.304:763): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201104934.307:764): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201105011.531:765): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201105011.531:766): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201105011.598:767): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1201105017.376:768): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.bluez.Manager member=DefaultAdapter dest=org.bluez spid=4115 tpid=2342 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1201105017.389:769): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.bluez.Error.NoSuchAdapter dest=:1.136 spid=2342 tpid=4115 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1201105068.079:770): avc:  denied  { getattr } for  pid=4008 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201105068.079:770): arch=40000003 syscall=229 success=yes exit=33 a0=42116360 a1=402a6723 a2=42102078 a3=ff items=0 ppid=1 pid=4008 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201105068.079:771): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105068.098:772): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105068.105:773): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201105146.304:774): avc:  denied  { write } for  pid=4008 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201105146.304:774): arch=40000003 syscall=5 success=yes exit=17 a0=4199c1a5 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=4008 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201105314.417:775): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201105314.422:776): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201105314.435:777): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201105314.435:778): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_DISP msg=audit(1201105376.612:779): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201105376.612:780): user pid=4248 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_AUTH msg=audit(1201105663.971:781): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201105663.975:782): user pid=4008 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201105777.439:783): avc:  denied  { getattr } for  pid=4453 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201105777.439:783): arch=40000003 syscall=229 success=yes exit=33 a0=41076b28 a1=402a6723 a2=41076b40 a3=ff items=0 ppid=4452 pid=4453 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.440:784): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.446:785): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.448:786): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.451:787): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.455:788): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.458:789): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.461:790): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.464:791): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105777.468:792): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105967.605:793): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201105977.097:794): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201106002.753:795): user pid=4028 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106064.849:796): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106064.854:797): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106228.523:798): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106228.523:799): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201106228.534:800): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106287.047:801): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201106336.673:802): avc:  denied  { write } for  pid=4453 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201106336.673:802): arch=40000003 syscall=5 success=yes exit=18 a0=41065f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=4453 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201106349.659:803): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106349.664:804): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106443.961:805): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106443.966:806): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106485.766:807): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106485.770:808): user pid=4453 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.104:809): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.110:810): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.113:811): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.117:812): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.121:813): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.124:814): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.127:815): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.131:816): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106562.134:817): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106581.314:818): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106581.319:819): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106653.577:820): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106653.591:821): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106667.425:822): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106733.499:823): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106733.503:824): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106811.014:825): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106811.019:826): user pid=4757 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.119:827): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.124:828): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.127:829): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.131:830): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.134:831): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.137:832): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.141:833): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.144:834): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201106874.147:835): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201106889.061:836): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201106889.066:837): user pid=4911 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201107661.739:838): user pid=5175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201107661.740:839): user pid=5175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201107661.740:840): login pid=5175 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201107661.749:841): user pid=5175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201107661.755:842): user pid=5175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201107661.755:843): user pid=5175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201108050.394:844): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201108050.398:845): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201108050.411:846): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201108050.411:847): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_DISP msg=audit(1201108104.093:848): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201108104.093:849): user pid=5287 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=AVC msg=audit(1201108437.259:850): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201108437.259:850): arch=40000003 syscall=229 success=yes exit=33 a0=41e94b48 a1=402a6723 a2=41e94b60 a3=ff items=0 ppid=5454 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.260:851): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.265:852): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.268:853): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.271:854): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.275:855): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.278:856): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.281:857): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.284:858): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201108437.288:859): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201108444.330:860): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201108444.330:860): arch=40000003 syscall=5 success=yes exit=17 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201108463.618:861): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201108463.623:862): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201108504.920:863): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201108504.924:864): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/cupsd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201108602.462:865): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5524 comm="okidecode" sig=11
>type=USER_END msg=audit(1201108695.668:866): user pid=4598 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201108759.349:867): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201108759.349:867): arch=40000003 syscall=5 success=yes exit=20 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1201108806.002:868): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5595 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201108894.282:869): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5651 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201108968.546:870): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5703 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109048.626:871): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5732 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109062.115:872): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5736 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109121.027:873): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5766 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109340.998:874): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5857 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109459.127:875): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5904 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109484.047:876): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5910 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109526.327:877): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5935 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109574.392:878): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=5956 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201109668.906:879): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6001 comm="okidecode" sig=11
>type=USER_AUTH msg=audit(1201109801.062:880): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201109801.063:881): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201109801.072:882): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201109917.819:883): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201109917.819:883): arch=40000003 syscall=229 success=yes exit=33 a0=41e95d58 a1=402a6723 a2=41e95ab0 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201109917.820:884): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201109928.660:885): user pid=6045 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201110979.920:886): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201110979.920:887): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201110979.929:888): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201111003.559:889): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201111149.840:890): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201111261.771:891): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201111261.772:892): user pid=6527 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201111261.772:893): login pid=6527 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201111261.779:894): user pid=6527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201111261.786:895): user pid=6527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201111261.786:896): user pid=6527 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201111727.240:897): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201111841.695:898): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201111841.695:898): arch=40000003 syscall=5 success=yes exit=21 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201111889.425:899): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201111889.425:899): arch=40000003 syscall=229 success=yes exit=33 a0=4262e450 a1=402a6723 a2=41ea2278 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201111889.425:900): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201111907.498:901): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6734 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201111940.984:902): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201111954.051:903): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6763 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201112059.004:904): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6802 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201113086.951:905): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201113101.240:906): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7134 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201113125.662:907): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201113134.177:908): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7154 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.074:909): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.080:910): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.084:911): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.088:912): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.092:913): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.097:914): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.100:915): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.103:916): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113260.106:917): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201113282.647:918): user pid=6416 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201113297.177:919): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201113297.178:920): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201113297.188:921): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.596:922): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.603:923): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.607:924): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.611:925): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.615:926): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.618:927): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.621:928): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.625:929): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113347.628:930): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201113355.635:931): user pid=7208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201113362.979:932): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201113362.980:933): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201113362.987:934): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.802:935): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.807:936): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.810:937): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.813:938): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.816:939): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.820:940): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.823:941): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.826:942): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113370.829:943): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201113824.602:944): user pid=7246 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201113836.372:945): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201113836.372:946): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201113836.381:947): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.481:948): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.487:949): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.491:950): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.496:951): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.500:952): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.504:953): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.507:954): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.510:955): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201113850.514:956): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201113961.556:957): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7437 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201114088.489:958): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201114105.602:959): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7491 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201114118.985:960): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201114131.378:961): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=7503 comm="okidecode" sig=11
>type=USER_ACCT msg=audit(1201114861.802:962): user pid=7686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201114861.803:963): user pid=7686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201114861.803:964): login pid=7686 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201114861.809:965): user pid=7686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201114861.816:966): user pid=7686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201114861.817:967): user pid=7686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201116521.036:968): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201116521.036:968): arch=40000003 syscall=5 success=yes exit=18 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1201116585.269:969): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8165 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201116669.254:970): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8200 comm="okidecode" sig=11
>type=AVC msg=audit(1201116991.360:971): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201116991.360:971): arch=40000003 syscall=229 success=yes exit=33 a0=4262f1f8 a1=402a6723 a2=41ead370 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201116991.361:972): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201116991.376:973): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201117008.402:974): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8322 comm="okidecode" sig=11
>type=LABEL_LEVEL_CHANGE msg=audit(1201117036.976:975): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201117036.992:976): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201117055.722:977): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8347 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201118293.379:978): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=4048 comm="dbus-launch" sig=6
>type=USER_ACCT msg=audit(1201118461.830:979): user pid=9560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201118461.831:980): user pid=9560 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201118461.831:981): login pid=9560 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201118461.839:982): user pid=9560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201118461.845:983): user pid=9560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201118461.845:984): user pid=9560 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201119310.658:985): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9973 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201119434.148:986): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=10014 comm="okidecode" sig=11
>type=USER_ACCT msg=audit(1201122061.861:987): user pid=10842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201122061.862:988): user pid=10842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201122061.862:989): login pid=10842 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201122061.871:990): user pid=10842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201122061.877:991): user pid=10842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201122061.877:992): user pid=10842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201125661.892:993): user pid=11827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201125661.892:994): user pid=11827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201125661.893:995): login pid=11827 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201125661.901:996): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201125661.907:997): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201125661.907:998): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201127645.940:999): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=12386 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201129261.921:1000): user pid=12875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201129261.922:1001): user pid=12875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201129261.922:1002): login pid=12875 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201129261.930:1003): user pid=12875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201129261.935:1004): user pid=12875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201129261.935:1005): user pid=12875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201130444.813:1006): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201130444.828:1007): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201130477.684:1008): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1201130530.610:1009): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=13312 comm="okidecode" sig=11
>type=USER_ACCT msg=audit(1201132861.951:1010): user pid=14472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201132861.951:1011): user pid=14472 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201132861.952:1012): login pid=14472 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201132861.960:1013): user pid=14472 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201132861.965:1014): user pid=14472 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201132861.965:1015): user pid=14472 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201136461.980:1016): user pid=15439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201136461.981:1017): user pid=15439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201136461.981:1018): login pid=15439 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201136461.988:1019): user pid=15439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201136461.993:1020): user pid=15439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201136461.993:1021): user pid=15439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201140061.007:1022): user pid=16411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201140061.008:1023): user pid=16411 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201140061.008:1024): login pid=16411 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201140061.014:1025): user pid=16411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201140061.018:1026): user pid=16411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201140061.018:1027): user pid=16411 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201143661.031:1028): user pid=17381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201143661.032:1029): user pid=17381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201143661.032:1030): login pid=17381 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201143661.039:1031): user pid=17381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201143661.044:1032): user pid=17381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201143661.044:1033): user pid=17381 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201147261.057:1034): user pid=18377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201147261.058:1035): user pid=18377 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201147261.058:1036): login pid=18377 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201147261.066:1037): user pid=18377 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201147261.071:1038): user pid=18377 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201147261.071:1039): user pid=18377 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201150861.085:1040): user pid=19354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201150861.086:1041): user pid=19354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201150861.086:1042): login pid=19354 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201150861.095:1043): user pid=19354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201150861.100:1044): user pid=19354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201150861.100:1045): user pid=19354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201154461.114:1046): user pid=20339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201154461.114:1047): user pid=20339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201154461.114:1048): login pid=20339 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201154461.121:1049): user pid=20339 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201154461.126:1050): user pid=20339 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201154461.126:1051): user pid=20339 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201158061.140:1052): user pid=21302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201158061.140:1053): user pid=21302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201158061.141:1054): login pid=21302 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201158061.150:1055): user pid=21302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201158061.154:1056): user pid=21302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201158061.154:1057): user pid=21302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201161242.690:1058): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22168 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201161265.866:1059): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22173 comm="okidecode" sig=11
>type=ANOM_ABEND msg=audit(1201161533.525:1060): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=22267 comm="okidecode" sig=11
>type=USER_ACCT msg=audit(1201161661.168:1061): user pid=22302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201161661.168:1062): user pid=22302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201161661.169:1063): login pid=22302 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201161661.175:1064): user pid=22302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201161661.180:1065): user pid=22302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201161661.180:1066): user pid=22302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201162001.412:1067): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201162001.412:1067): arch=40000003 syscall=5 success=yes exit=18 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201162315.747:1068): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201162315.747:1068): arch=40000003 syscall=229 success=yes exit=33 a0=41e99b90 a1=402a6723 a2=426134c8 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201162315.748:1069): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201162418.507:1070): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201165261.194:1071): user pid=23748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201165261.195:1072): user pid=23748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201165261.195:1073): login pid=23748 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201165261.203:1074): user pid=23748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201165261.208:1075): user pid=23748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201165261.208:1076): user pid=23748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201168861.222:1077): user pid=24731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201168861.223:1078): user pid=24731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201168861.223:1079): login pid=24731 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201168861.232:1080): user pid=24731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201168861.237:1081): user pid=24731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201168861.237:1082): user pid=24731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201168921.244:1083): user pid=24749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201168921.245:1084): user pid=24749 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201168921.245:1085): login pid=24749 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201168921.253:1086): user pid=24749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201169502.191:1087): user pid=24749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201169502.192:1088): user pid=24749 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201172461.206:1089): user pid=26646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201172461.207:1090): user pid=26646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201172461.207:1091): login pid=26646 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201172461.215:1092): user pid=26646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201172461.220:1093): user pid=26646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201172461.221:1094): user pid=26646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201173601.230:1095): user pid=26911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201173601.230:1096): user pid=26911 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201173601.231:1097): login pid=26911 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201173601.238:1098): user pid=26911 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201174201.401:1099): user pid=30866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201174201.402:1100): user pid=30866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201174201.402:1101): login pid=30866 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201174201.407:1102): user pid=30866 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201176061.730:1103): user pid=32194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201176061.731:1104): user pid=32194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201176061.731:1105): login pid=32194 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201176061.739:1106): user pid=32194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201176061.745:1107): user pid=32194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201176061.745:1108): user pid=32194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201178598.468:1109): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=530 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201179661.760:1110): user pid=819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201179661.761:1111): user pid=819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201179661.761:1112): login pid=819 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201179661.769:1113): user pid=819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201179661.774:1114): user pid=819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201179661.775:1115): user pid=819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201180501.783:1116): user pid=1044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201180501.783:1117): user pid=1044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201180501.784:1118): login pid=1044 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201180501.789:1119): user pid=1044 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201182688.800:1120): user pid=7381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201182699.819:1121): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201182699.820:1122): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201182699.872:1123): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201182714.149:1124): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201182714.149:1124): arch=40000003 syscall=229 success=yes exit=33 a0=42613600 a1=402a6723 a2=4262bb98 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.150:1125): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.164:1126): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.168:1127): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.177:1128): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.181:1129): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.184:1130): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.188:1131): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.205:1132): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201182714.213:1133): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201183261.730:1134): user pid=1849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201183261.731:1135): user pid=1849 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201183261.731:1136): login pid=1849 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201183261.737:1137): user pid=1849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201183261.765:1138): user pid=1849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201183261.765:1139): user pid=1849 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201186861.781:1140): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201186861.781:1141): user pid=3110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201186861.781:1142): login pid=3110 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201186861.791:1143): user pid=3110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201186861.796:1144): user pid=3110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201186861.796:1145): user pid=3110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201190461.810:1146): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201190461.811:1147): user pid=18558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201190461.811:1148): login pid=18558 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201190461.816:1149): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201190461.821:1150): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201190461.821:1151): user pid=18558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201192581.492:1152): user pid=19188 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201192581.497:1153): user pid=19188 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1201192581.544:1154): user pid=19188 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=LOGIN msg=audit(1201192581.545:1155): login pid=19188 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201192581.546:1156): user pid=19188 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1201192581.548:1157): user pid=19192 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1201192582.032:1158): user pid=19188 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=USER_END msg=audit(1201192582.033:1159): user pid=19188 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=amd, addr=192.168.1.98, terminal=ssh res=success)'
>type=ANOM_ABEND msg=audit(1201192743.429:1160): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=1689 comm="dbus-launch" sig=6
>type=USER_ACCT msg=audit(1201194061.837:1161): user pid=19652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201194061.838:1162): user pid=19652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201194061.839:1163): login pid=19652 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201194061.847:1164): user pid=19652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201194061.853:1165): user pid=19652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201194061.854:1166): user pid=19652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201196538.196:1167): user pid=21024 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201196563.995:1168): user pid=21040 uid=500 auid=500 subj=system_u:system_r:unconfined_crontab_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/crontab" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201196701.881:1169): user pid=21078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201196701.882:1170): user pid=21078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201196701.882:1171): login pid=21078 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201196701.890:1172): user pid=21078 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201197661.439:1173): user pid=21456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201197661.440:1174): user pid=21456 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201197661.440:1175): login pid=21456 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201197661.446:1176): user pid=21456 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201197661.452:1177): user pid=21456 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201197661.452:1178): user pid=21456 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201198501.461:1179): user pid=21685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201198501.461:1180): user pid=21685 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201198501.461:1181): login pid=21685 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201198501.469:1182): user pid=21685 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201200301.986:1183): user pid=22227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201200301.987:1184): user pid=22227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201200301.987:1185): login pid=22227 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201200301.994:1186): user pid=22227 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201201261.781:1187): user pid=22577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201201261.782:1188): user pid=22577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201201261.782:1189): login pid=22577 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201201261.790:1190): user pid=22577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201201261.794:1191): user pid=22577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201201261.794:1192): user pid=22577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201201721.597:1193): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=4759 comm="firefox-bin" sig=6
>type=USER_ACCT msg=audit(1201202101.804:1194): user pid=22917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201202101.804:1195): user pid=22917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201202101.804:1196): login pid=22917 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201202101.812:1197): user pid=22917 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201203901.248:1198): user pid=23497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201203901.248:1199): user pid=23497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201203901.249:1200): login pid=23497 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201203901.255:1201): user pid=23497 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201204861.221:1202): user pid=23847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201204861.221:1203): user pid=23847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201204861.222:1204): login pid=23847 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201204861.226:1205): user pid=23847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201204861.231:1206): user pid=23847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201204861.231:1207): user pid=23847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201204891.405:1208): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=23860 comm="f-spot" sig=6
>type=USER_END msg=audit(1201205623.067:1209): user pid=1677 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201205701.241:1210): user pid=24189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201205701.241:1211): user pid=24189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201205701.242:1212): login pid=24189 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201205701.249:1213): user pid=24189 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201207501.247:1214): user pid=25125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201207501.247:1215): user pid=25125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201207501.248:1216): login pid=25125 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201207501.253:1217): user pid=25125 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201208461.131:1218): user pid=25431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201208461.131:1219): user pid=25431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201208461.131:1220): login pid=25431 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201208461.140:1221): user pid=25431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201208461.145:1222): user pid=25431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201208461.145:1223): user pid=25431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201209301.154:1224): user pid=25660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201209301.154:1225): user pid=25660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201209301.155:1226): login pid=25660 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201209301.160:1227): user pid=25660 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201211101.200:1228): user pid=26103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201211101.201:1229): user pid=26103 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201211101.202:1230): login pid=26103 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201211101.209:1231): user pid=26103 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201212061.647:1232): user pid=26424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201212061.647:1233): user pid=26424 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201212061.647:1234): login pid=26424 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201212061.653:1235): user pid=26424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201212061.658:1236): user pid=26424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201212061.658:1237): user pid=26424 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201212901.668:1238): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201212901.668:1239): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201212901.668:1240): login pid=26704 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201212901.675:1241): user pid=26704 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201214701.643:1242): user pid=27499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201214701.644:1243): user pid=27499 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201214701.644:1244): login pid=27499 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201214701.652:1245): user pid=27499 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201215661.539:1246): user pid=27814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201215661.540:1247): user pid=27814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201215661.540:1248): login pid=27814 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201215661.550:1249): user pid=27814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201215661.554:1250): user pid=27814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201215661.554:1251): user pid=27814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201216501.563:1252): user pid=28046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201216501.563:1253): user pid=28046 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201216501.564:1254): login pid=28046 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201216501.571:1255): user pid=28046 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201217240.295:1256): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201217240.295:1257): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201217240.324:1258): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201217422.557:1259): user pid=28368 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201217422.587:1260): user pid=28369 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201217422.589:1261): user pid=28370 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201217422.591:1262): user pid=28371 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1201217946.018:1263): user pid=28302 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201218301.190:1264): user pid=31319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201218301.190:1265): user pid=31319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201218301.191:1266): login pid=31319 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201218301.196:1267): user pid=31319 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201219261.856:1268): user pid=31621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201219261.857:1269): user pid=31621 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201219261.857:1270): login pid=31621 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201219261.865:1271): user pid=31621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201219261.871:1272): user pid=31621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201219261.871:1273): user pid=31621 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201220101.880:1274): user pid=31856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201220101.880:1275): user pid=31856 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201220101.880:1276): login pid=31856 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201220101.887:1277): user pid=31856 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201221901.877:1278): user pid=32383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201221901.878:1279): user pid=32383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201221901.878:1280): login pid=32383 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201221901.887:1281): user pid=32383 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201222861.193:1282): user pid=32684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201222861.193:1283): user pid=32684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201222861.193:1284): login pid=32684 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201222861.200:1285): user pid=32684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201222861.205:1286): user pid=32684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201222861.205:1287): user pid=32684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201223701.214:1288): user pid=447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201223701.214:1289): user pid=447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201223701.215:1290): login pid=447 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201223701.220:1291): user pid=447 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201225501.523:1292): user pid=990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201225501.524:1293): user pid=990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201225501.524:1294): login pid=990 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201225501.532:1295): user pid=990 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201226461.441:1296): user pid=1290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201226461.442:1297): user pid=1290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201226461.442:1298): login pid=1290 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201226461.449:1299): user pid=1290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201226461.453:1300): user pid=1290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201226461.454:1301): user pid=1290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201227301.462:1302): user pid=1524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201227301.462:1303): user pid=1524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201227301.463:1304): login pid=1524 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201227301.471:1305): user pid=1524 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201229101.701:1306): user pid=2073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201229101.701:1307): user pid=2073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201229101.701:1308): login pid=2073 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201229101.707:1309): user pid=2073 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201230061.426:1310): user pid=2532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201230061.427:1311): user pid=2532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201230061.427:1312): login pid=2532 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201230061.434:1313): user pid=2532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201230061.439:1314): user pid=2532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201230061.439:1315): user pid=2532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201230901.448:1316): user pid=2872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201230901.448:1317): user pid=2872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201230901.448:1318): login pid=2872 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201230901.457:1319): user pid=2872 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201230978.777:1320): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2939 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201232701.751:1321): user pid=3463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201232701.752:1322): user pid=3463 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201232701.752:1323): login pid=3463 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201232701.760:1324): user pid=3463 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201233661.097:1325): user pid=3786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201233661.097:1326): user pid=3786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201233661.097:1327): login pid=3786 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201233661.105:1328): user pid=3786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201233661.110:1329): user pid=3786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201233661.110:1330): user pid=3786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201234501.119:1331): user pid=4021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201234501.120:1332): user pid=4021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201234501.120:1333): login pid=4021 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201234501.125:1334): user pid=4021 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201236301.802:1335): user pid=4568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201236301.803:1336): user pid=4568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201236301.803:1337): login pid=4568 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201236301.811:1338): user pid=4568 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201237261.579:1339): user pid=4873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201237261.580:1340): user pid=4873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201237261.580:1341): login pid=4873 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201237261.587:1342): user pid=4873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201237261.592:1343): user pid=4873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201237261.593:1344): user pid=4873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201238101.601:1345): user pid=5108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201238101.601:1346): user pid=5108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201238101.602:1347): login pid=5108 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201238101.610:1348): user pid=5108 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201239901.550:1349): user pid=5636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201239901.551:1350): user pid=5636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201239901.551:1351): login pid=5636 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201239901.559:1352): user pid=5636 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201240861.825:1353): user pid=5937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201240861.825:1354): user pid=5937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201240861.825:1355): login pid=5937 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201240861.833:1356): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201240861.838:1357): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201240861.838:1358): user pid=5937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201241701.847:1359): user pid=6163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201241701.847:1360): user pid=6163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201241701.847:1361): login pid=6163 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201241701.855:1362): user pid=6163 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201243501.268:1363): user pid=6688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201243501.268:1364): user pid=6688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201243501.269:1365): login pid=6688 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201243501.278:1366): user pid=6688 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201244461.424:1367): user pid=6985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201244461.425:1368): user pid=6985 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201244461.425:1369): login pid=6985 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201244461.430:1370): user pid=6985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201244461.435:1371): user pid=6985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201244461.435:1372): user pid=6985 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201245301.444:1373): user pid=7245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201245301.444:1374): user pid=7245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201245301.444:1375): login pid=7245 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201245301.453:1376): user pid=7245 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201247101.497:1377): user pid=7835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201247101.498:1378): user pid=7835 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201247101.498:1379): login pid=7835 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201247101.506:1380): user pid=7835 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201248061.040:1381): user pid=8576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201248061.041:1382): user pid=8576 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201248061.041:1383): login pid=8576 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201248061.050:1384): user pid=8576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201248061.054:1385): user pid=8576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201248061.054:1386): user pid=8576 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201248901.063:1387): user pid=8836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201248901.064:1388): user pid=8836 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201248901.064:1389): login pid=8836 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201248901.070:1390): user pid=8836 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201249801.757:1391): user pid=9157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201249801.757:1392): user pid=9157 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201249801.758:1393): login pid=9157 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201249801.766:1394): user pid=9157 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201249814.065:1395): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=9172 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201250701.757:1396): user pid=6459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201250701.758:1397): user pid=6459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201250701.758:1398): login pid=6459 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201250701.764:1399): user pid=6459 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201251661.441:1400): user pid=5658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201251661.442:1401): user pid=5658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201251661.442:1402): login pid=5658 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201251661.447:1403): user pid=5658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201251661.453:1404): user pid=5658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201251661.454:1405): user pid=5658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201252501.461:1406): user pid=1532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201252501.461:1407): user pid=1532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201252501.461:1408): login pid=1532 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201252501.467:1409): user pid=1532 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201254301.935:1410): user pid=2238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201254301.936:1411): user pid=2238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201254301.936:1412): login pid=2238 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201254301.943:1413): user pid=2238 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201255261.374:1414): user pid=2581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201255261.375:1415): user pid=2581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201255261.376:1416): login pid=2581 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201255261.383:1417): user pid=2581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201255261.389:1418): user pid=2581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201255261.389:1419): user pid=2581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201255321.396:1420): user pid=2599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201255321.397:1421): user pid=2599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201255321.397:1422): login pid=2599 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201255321.405:1423): user pid=2599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201255857.375:1424): user pid=2599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201255857.376:1425): user pid=2599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201256101.385:1426): user pid=4163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201256101.385:1427): user pid=4163 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201256101.386:1428): login pid=4163 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201256101.392:1429): user pid=4163 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201257901.306:1430): user pid=4709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201257901.307:1431): user pid=4709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201257901.307:1432): login pid=4709 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201257901.313:1433): user pid=4709 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201258861.539:1434): user pid=5011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201258861.539:1435): user pid=5011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201258861.540:1436): login pid=5011 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201258861.547:1437): user pid=5011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201258861.552:1438): user pid=5011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201258861.552:1439): user pid=5011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201259701.560:1440): user pid=5241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201259701.561:1441): user pid=5241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201259701.561:1442): login pid=5241 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201259701.569:1443): user pid=5241 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201260001.037:1444): user pid=5367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201260001.037:1445): user pid=5367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201260001.038:1446): login pid=5367 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201260001.044:1447): user pid=5367 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201260601.080:1448): user pid=9292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201260601.080:1449): user pid=9292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201260601.080:1450): login pid=9292 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201260601.087:1451): user pid=9292 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201261501.242:1452): user pid=10352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201261501.242:1453): user pid=10352 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201261501.243:1454): login pid=10352 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201261501.250:1455): user pid=10352 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201262461.611:1456): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201262461.611:1457): user pid=10718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201262461.612:1458): login pid=10718 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201262461.618:1459): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201262461.623:1460): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201262461.623:1461): user pid=10718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201263301.631:1462): user pid=10953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201263301.632:1463): user pid=10953 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201263301.632:1464): login pid=10953 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201263301.639:1465): user pid=10953 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201265101.804:1466): user pid=11595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201265101.805:1467): user pid=11595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201265101.805:1468): login pid=11595 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201265101.813:1469): user pid=11595 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201265623.762:1470): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=11786 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201266061.879:1471): user pid=11904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201266061.880:1472): user pid=11904 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201266061.880:1473): login pid=11904 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201266061.888:1474): user pid=11904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201266061.892:1475): user pid=11904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201266061.893:1476): user pid=11904 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201266901.902:1477): user pid=12134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201266901.902:1478): user pid=12133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201266901.903:1479): user pid=12133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201266901.903:1480): login pid=12133 uid=0 old auid=4294967295 new auid=500
>type=CRED_ACQ msg=audit(1201266901.904:1481): user pid=12134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201266901.904:1482): login pid=12134 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201266901.911:1483): user pid=12133 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1201266901.913:1484): user pid=12134 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201268701.393:1485): user pid=12694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201268701.425:1486): user pid=12694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201268701.425:1487): login pid=12694 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201268701.429:1488): user pid=12694 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201269661.116:1489): user pid=13000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201269661.116:1490): user pid=13000 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201269661.116:1491): login pid=13000 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201269661.125:1492): user pid=13000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201269661.232:1493): user pid=13000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201269661.233:1494): user pid=13000 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201269797.397:1495): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201269797.397:1496): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201269797.537:1497): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201269807.489:1498): user pid=13071 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201270327.344:1499): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201270327.348:1500): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_START msg=audit(1201270327.364:1501): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_ACQ msg=audit(1201270327.392:1502): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=CRED_DISP msg=audit(1201270431.350:1503): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_END msg=audit(1201270431.351:1504): user pid=13315 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/13 res=success)'
>type=USER_ACCT msg=audit(1201270501.243:1505): user pid=13408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201270501.243:1506): user pid=13408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201270501.244:1507): login pid=13408 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201270501.250:1508): user pid=13408 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201272301.475:1509): user pid=14053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201272301.476:1510): user pid=14053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201272301.476:1511): login pid=14053 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201272301.482:1512): user pid=14053 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201273261.631:1513): user pid=14384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201273261.631:1514): user pid=14384 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201273261.631:1515): login pid=14384 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201273261.640:1516): user pid=14384 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201273261.646:1517): user pid=14384 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201273261.646:1518): user pid=14384 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201274101.655:1519): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201274101.655:1520): user pid=14625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201274101.655:1521): login pid=14625 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201274101.663:1522): user pid=14625 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201275901.851:1523): user pid=15176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201275901.851:1524): user pid=15176 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201275901.852:1525): login pid=15176 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201275901.858:1526): user pid=15176 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201276172.142:1527): avc:  denied  { getattr } for  pid=18012 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1201276172.142:1527): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1201276172.143:1528): avc:  denied  { read } for  pid=18012 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1201276172.143:1528): arch=40000003 syscall=5 success=yes exit=18 a0=b990e258 a1=8000 a2=1b6 a3=8000 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1201276174.122:1529): avc:  denied  { getattr } for  pid=18012 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=47710275 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1201276174.122:1529): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201276861.628:1530): user pid=15478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201276861.629:1531): user pid=15478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201276861.629:1532): login pid=15478 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201276861.639:1533): user pid=15478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201276861.645:1534): user pid=15478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201276861.645:1535): user pid=15478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201277701.654:1536): user pid=15709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201277701.655:1537): user pid=15709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201277701.655:1538): login pid=15709 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201277701.660:1539): user pid=15709 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201279501.047:1540): user pid=16239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201279501.047:1541): user pid=16239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201279501.047:1542): login pid=16239 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201279501.054:1543): user pid=16239 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201280461.319:1544): user pid=16547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201280461.320:1545): user pid=16547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201280461.320:1546): login pid=16547 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201280461.328:1547): user pid=16547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201280461.333:1548): user pid=16547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201280461.333:1549): user pid=16547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201281301.341:1550): user pid=16772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201281301.342:1551): user pid=16772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201281301.342:1552): login pid=16772 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201281301.350:1553): user pid=16772 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201283101.506:1554): user pid=17299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201283101.507:1555): user pid=17299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201283101.507:1556): login pid=17299 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201283101.514:1557): user pid=17299 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201284061.553:1558): user pid=17597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201284061.553:1559): user pid=17597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201284061.553:1560): login pid=17597 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201284061.561:1561): user pid=17597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201284061.566:1562): user pid=17597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201284061.566:1563): user pid=17597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201284901.574:1564): user pid=17825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201284901.575:1565): user pid=17825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201284901.575:1566): login pid=17825 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201284901.580:1567): user pid=17825 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201286701.302:1568): user pid=18381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201286701.302:1569): user pid=18381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201286701.303:1570): login pid=18381 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201286701.311:1571): user pid=18381 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201287661.806:1572): user pid=18680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201287661.807:1573): user pid=18680 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201287661.807:1574): login pid=18680 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201287661.812:1575): user pid=18680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201287661.817:1576): user pid=18680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201287661.817:1577): user pid=18680 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201288004.775:1578): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201288004.775:1578): arch=40000003 syscall=5 success=yes exit=19 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201288066.803:1579): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201288066.803:1580): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201288066.813:1581): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201288188.812:1582): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201288188.812:1582): arch=40000003 syscall=229 success=yes exit=33 a0=42637e90 a1=402a6723 a2=42618678 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201288188.813:1583): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201288501.829:1584): user pid=20558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201288501.830:1585): user pid=20558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201288501.830:1586): login pid=20558 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201288501.837:1587): user pid=20558 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201290301.042:1588): user pid=21216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201290301.044:1589): user pid=21216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201290301.044:1590): login pid=21216 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201290301.051:1591): user pid=21216 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201291261.747:1592): user pid=21558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201291261.748:1593): user pid=21558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201291261.748:1594): login pid=21558 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201291261.753:1595): user pid=21558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201291261.759:1596): user pid=21558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201291261.760:1597): user pid=21558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201292101.768:1598): user pid=21789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201292101.769:1599): user pid=21789 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201292101.769:1600): login pid=21789 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201292101.777:1601): user pid=21789 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201293901.121:1602): user pid=22348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201293901.122:1603): user pid=22348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201293901.123:1604): login pid=22348 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201293901.129:1605): user pid=22348 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201294861.491:1606): user pid=22666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201294861.491:1607): user pid=22666 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201294861.492:1608): login pid=22666 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201294861.497:1609): user pid=22666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201294861.502:1610): user pid=22666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201294861.502:1611): user pid=22666 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201295701.511:1612): user pid=22907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201295701.511:1613): user pid=22907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201295701.512:1614): login pid=22907 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201295701.520:1615): user pid=22907 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201297501.401:1616): user pid=23438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201297501.402:1617): user pid=23438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201297501.402:1618): login pid=23438 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201297501.410:1619): user pid=23438 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201298461.893:1620): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201298461.893:1621): user pid=23742 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201298461.893:1622): login pid=23742 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201298461.900:1623): user pid=23742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201298461.905:1624): user pid=23742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201298461.906:1625): user pid=23742 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201299301.914:1626): user pid=23984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201299301.915:1627): user pid=23984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201299301.915:1628): login pid=23984 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201299301.923:1629): user pid=23984 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201301101.019:1630): user pid=24719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201301101.020:1631): user pid=24719 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201301101.020:1632): login pid=24719 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201301101.026:1633): user pid=24719 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201302061.651:1634): user pid=25189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201302061.652:1635): user pid=25189 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201302061.652:1636): login pid=25189 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201302061.659:1637): user pid=25189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201302061.664:1638): user pid=25189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201302061.664:1639): user pid=25189 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201302901.672:1640): user pid=25581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201302901.672:1641): user pid=25581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201302901.673:1642): login pid=25581 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201302901.678:1643): user pid=25581 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201304701.872:1644): user pid=26353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201304701.873:1645): user pid=26353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201304701.873:1646): login pid=26353 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201304701.880:1647): user pid=26353 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201305661.272:1648): user pid=26652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201305661.273:1649): user pid=26652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201305661.273:1650): login pid=26652 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201305661.280:1651): user pid=26652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201305661.285:1652): user pid=26652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201305661.285:1653): user pid=26652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201306501.294:1654): user pid=26906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201306501.294:1655): user pid=26906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201306501.295:1656): login pid=26906 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201306501.302:1657): user pid=26906 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201307368.347:1658): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=27692 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1201307669.238:1659): auid=500 uid=0 gid=0 subj=system_u:system_r:unconfined_t:s0 pid=20400 comm="dbus-launch" sig=6
>type=ANOM_PROMISCUOUS msg=audit(1201308252.959:1660): dev=eth0 prom=256 old_prom=0 auid=500
>type=SYSCALL msg=audit(1201308252.959:1660): arch=40000003 syscall=5 per=400000 success=yes exit=174 a0=bf81d432 a1=8802 a2=0 a3=8802 items=0 ppid=1 pid=28006 auid=500 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201308301.687:1661): user pid=28024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201308301.688:1662): user pid=28024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201308301.688:1663): login pid=28024 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201308301.696:1664): user pid=28024 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201308902.201:1665): avc:  denied  { search } for  pid=28249 comm="smbd" name="home" dev=dm-0 ino=23166977 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=AVC msg=audit(1201308902.201:1665): avc:  denied  { getattr } for  pid=28249 comm="smbd" path="/home/rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201308902.201:1665): arch=40000003 syscall=195 success=yes exit=0 a0=b9c034d8 a1=bff3eeb0 a2=4c8ff4 a3=bff3eeb0 items=0 ppid=2802 pid=28249 auid=4294967295 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1201308902.233:1666): avc:  denied  { read } for  pid=28249 comm="smbd" name="rick" dev=dm-0 ino=23265282 scontext=system_u:system_r:smbd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201308902.233:1666): arch=40000003 syscall=5 success=yes exit=25 a0=b9befc30 a1=98800 a2=37cd9c a3=b9beee70 items=0 ppid=2802 pid=28249 auid=4294967295 uid=500 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=(none) comm="smbd" exe="/usr/sbin/smbd" subj=system_u:system_r:smbd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201309261.488:1667): user pid=28351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201309261.488:1668): user pid=28351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201309261.489:1669): login pid=28351 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201309261.496:1670): user pid=28351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201309261.502:1671): user pid=28351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201309261.502:1672): user pid=28351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1201309586.797:1673): dev=eth0 prom=0 old_prom=256 auid=500
>type=SYSCALL msg=audit(1201309586.797:1673): arch=40000003 syscall=6 per=400000 success=yes exit=0 a0=ae a1=0 a2=bf81d9ec a3=9ffd180 items=0 ppid=1 pid=28006 auid=500 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="vmware-vmx" exe="/usr/lib/vmware/bin/vmware-vmx" subj=system_u:system_r:unconfined_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201310101.511:1674): user pid=28622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201310101.511:1675): user pid=28622 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201310101.511:1676): login pid=28622 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201310101.516:1677): user pid=28622 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201310700.857:1678): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28842 comm="gs" sig=11
>type=ANOM_ABEND msg=audit(1201310764.592:1679): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28900 comm="gs854" sig=11
>type=ANOM_ABEND msg=audit(1201310890.020:1680): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=28951 comm="gs.cur" sig=11
>type=ANOM_ABEND msg=audit(1201311325.276:1681): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=1207 comm="gs.cur" sig=11
>type=USER_ACCT msg=audit(1201311901.543:1682): user pid=16343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201311901.543:1683): user pid=16343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201311901.543:1684): login pid=16343 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201311901.551:1685): user pid=16343 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201311938.492:1686): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16409 comm="gs.cur" sig=11
>type=ANOM_ABEND msg=audit(1201312057.792:1687): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16451 comm="gs861" sig=11
>type=ANOM_ABEND msg=audit(1201312064.979:1688): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=16452 comm="gs.cur" sig=11
>type=USER_ACCT msg=audit(1201312861.896:1689): user pid=16673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201312861.897:1690): user pid=16673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201312861.897:1691): login pid=16673 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201312861.905:1692): user pid=16673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201312861.910:1693): user pid=16673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201312861.911:1694): user pid=16673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201313701.919:1695): user pid=16909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201313701.919:1696): user pid=16909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201313701.919:1697): login pid=16909 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201313701.925:1698): user pid=16909 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201315501.346:1699): user pid=17459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201315501.346:1700): user pid=17459 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201315501.347:1701): login pid=17459 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201315501.353:1702): user pid=17459 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201316461.762:1703): user pid=17761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201316461.763:1704): user pid=17761 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201316461.763:1705): login pid=17761 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201316461.770:1706): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201316461.775:1707): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201316461.775:1708): user pid=17761 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201317301.784:1709): user pid=17990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201317301.784:1710): user pid=17990 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201317301.784:1711): login pid=17990 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201317301.791:1712): user pid=17990 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201318390.775:1713): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18407 comm="gs.cur" sig=11
>type=ANOM_ABEND msg=audit(1201318422.626:1714): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18418 comm="gs.cur" sig=11
>type=ANOM_ABEND msg=audit(1201318573.394:1715): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=18466 comm="gs.cur" sig=11
>type=USER_ACCT msg=audit(1201319101.532:1716): user pid=18728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201319101.532:1717): user pid=18728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201319101.533:1718): login pid=18728 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201319101.540:1719): user pid=18728 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201320061.496:1720): user pid=19137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201320061.497:1721): user pid=19137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201320061.497:1722): login pid=19137 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201320061.504:1723): user pid=19137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201320061.511:1724): user pid=19137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201320061.511:1725): user pid=19137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201320703.877:1726): avc:  denied  { getattr } for  pid=18012 comm="httpd" path="/home/rick/photos/catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1201320703.877:1726): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1201320703.877:1727): avc:  denied  { read } for  pid=18012 comm="httpd" name="catvid" dev=dm-0 ino=23798522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1201320703.877:1727): arch=40000003 syscall=5 success=yes exit=18 a0=b9902210 a1=8000 a2=1b6 a3=8000 items=0 ppid=2681 pid=18012 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1201320705.381:1728): avc:  denied  { getattr } for  pid=18011 comm="httpd" path="/home/rick/photos/101msdcf/.photo" dev=dm-0 ino=47710275 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:dosfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1201320705.381:1728): arch=40000003 syscall=196 success=yes exit=0 a0=bfd75748 a1=bfd7569c a2=52bff4 a3=171 items=0 ppid=2681 pid=18011 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1201320776.674:1729): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19358 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201320901.520:1730): user pid=19393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201320901.520:1731): user pid=19393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201320901.521:1732): login pid=19393 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201320901.528:1733): user pid=19393 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201322701.779:1734): user pid=19942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201322701.780:1735): user pid=19942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201322701.780:1736): login pid=19942 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201322701.786:1737): user pid=19942 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201323661.749:1738): user pid=20241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201323661.750:1739): user pid=20241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201323661.750:1740): login pid=20241 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201323661.756:1741): user pid=20241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201323661.762:1742): user pid=20241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201323661.762:1743): user pid=20241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201324501.771:1744): user pid=20475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201324501.771:1745): user pid=20475 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201324501.772:1746): login pid=20475 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201324501.779:1747): user pid=20475 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201326301.100:1748): user pid=21011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201326301.101:1749): user pid=21011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201326301.101:1750): login pid=21011 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201326301.107:1751): user pid=21011 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201327261.513:1752): user pid=21325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201327261.513:1753): user pid=21325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201327261.513:1754): login pid=21325 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201327261.520:1755): user pid=21325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201327261.525:1756): user pid=21325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201327261.525:1757): user pid=21325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201328101.533:1758): user pid=21553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201328101.534:1759): user pid=21553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201328101.534:1760): login pid=21553 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201328101.542:1761): user pid=21553 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201329901.890:1762): user pid=22124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201329901.891:1763): user pid=22124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201329901.891:1764): login pid=22124 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201329901.899:1765): user pid=22124 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201330861.242:1766): user pid=22631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201330861.242:1767): user pid=22631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201330861.243:1768): login pid=22631 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201330861.250:1769): user pid=22631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201330861.256:1770): user pid=22631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201330861.256:1771): user pid=22631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201331701.265:1772): user pid=22887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201331701.265:1773): user pid=22887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201331701.265:1774): login pid=22887 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201331701.272:1775): user pid=22887 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201333501.079:1776): user pid=23423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201333501.080:1777): user pid=23423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201333501.080:1778): login pid=23423 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201333501.086:1779): user pid=23423 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201334461.150:1780): user pid=23722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201334461.151:1781): user pid=23722 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201334461.151:1782): login pid=23722 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201334461.156:1783): user pid=23722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201334461.161:1784): user pid=23722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201334461.161:1785): user pid=23722 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201335301.169:1786): user pid=23950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201335301.170:1787): user pid=23950 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201335301.170:1788): login pid=23950 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201335301.177:1789): user pid=23950 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201337101.195:1790): user pid=24486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201337101.195:1791): user pid=24486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201337101.195:1792): login pid=24486 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201337101.202:1793): user pid=24486 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201338061.808:1794): user pid=24785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201338061.808:1795): user pid=24785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201338061.808:1796): login pid=24785 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201338061.817:1797): user pid=24785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201338061.822:1798): user pid=24785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201338061.822:1799): user pid=24785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201338901.830:1800): user pid=25012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201338901.831:1801): user pid=25012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201338901.831:1802): login pid=25012 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201338901.838:1803): user pid=25012 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201340701.051:1804): user pid=25616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201340701.051:1805): user pid=25616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201340701.052:1806): login pid=25616 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201340701.059:1807): user pid=25616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201341661.893:1808): user pid=26086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201341661.893:1809): user pid=26086 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201341661.894:1810): login pid=26086 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201341661.899:1811): user pid=26086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201341661.904:1812): user pid=26086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201341661.905:1813): user pid=26086 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201341721.911:1814): user pid=26106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201341721.912:1815): user pid=26106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201341721.912:1816): login pid=26106 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201341721.921:1817): user pid=26106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201342331.922:1818): user pid=26106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201342331.923:1819): user pid=26106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201342501.931:1820): user pid=27227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201342501.932:1821): user pid=27227 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201342501.932:1822): login pid=27227 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201342501.937:1823): user pid=27227 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201344301.645:1824): user pid=27758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201344301.670:1825): user pid=27758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201344301.670:1826): login pid=27758 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201344301.675:1827): user pid=27758 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201345261.302:1828): user pid=28060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201345261.303:1829): user pid=28060 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201345261.303:1830): login pid=28060 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201345261.310:1831): user pid=28060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201345261.314:1832): user pid=28060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201345261.314:1833): user pid=28060 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201346101.323:1834): user pid=28291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201346101.323:1835): user pid=28291 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201346101.324:1836): login pid=28291 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201346101.331:1837): user pid=28291 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201346401.955:1838): user pid=28415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201346401.956:1839): user pid=28415 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201346401.956:1840): login pid=28415 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201346401.963:1841): user pid=28415 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201347001.566:1842): user pid=31989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201347001.567:1843): user pid=31989 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201347001.567:1844): login pid=31989 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201347001.572:1845): user pid=31989 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201347901.469:1846): user pid=629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201347901.469:1847): user pid=629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201347901.470:1848): login pid=629 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201347901.477:1849): user pid=629 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201348861.597:1850): user pid=2004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201348861.598:1851): user pid=2004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201348861.598:1852): login pid=2004 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201348861.606:1853): user pid=2004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201348861.611:1854): user pid=2004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201348861.611:1855): user pid=2004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201349701.620:1856): user pid=2247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201349701.620:1857): user pid=2247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201349701.620:1858): login pid=2247 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201349701.626:1859): user pid=2247 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201350473.650:1860): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201350473.650:1861): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201350473.692:1862): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201350492.773:1863): user pid=2593 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201351501.319:1864): user pid=3457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201351501.320:1865): user pid=3457 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201351501.320:1866): login pid=3457 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201351501.326:1867): user pid=3457 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201352461.269:1868): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201352461.269:1869): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201352461.269:1870): login pid=3793 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201352461.276:1871): user pid=3793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201352461.281:1872): user pid=3793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201352461.281:1873): user pid=3793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201353301.290:1874): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201353301.291:1875): user pid=4099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201353301.291:1876): user pid=4099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201353301.291:1877): login pid=4099 uid=0 old auid=4294967295 new auid=500
>type=CRED_ACQ msg=audit(1201353301.292:1878): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201353301.292:1879): login pid=4098 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201353301.299:1880): user pid=4098 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1201353301.300:1881): user pid=4099 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201355101.890:1882): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201355101.890:1883): user pid=4674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201355101.890:1884): login pid=4674 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201355101.897:1885): user pid=4674 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201356061.028:1886): user pid=4987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201356061.029:1887): user pid=4987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201356061.029:1888): login pid=4987 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201356061.036:1889): user pid=4987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201356061.062:1890): user pid=4987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201356061.062:1891): user pid=4987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201356901.070:1892): user pid=5222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201356901.071:1893): user pid=5222 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201356901.071:1894): login pid=5222 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201356901.076:1895): user pid=5222 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201358701.598:1896): user pid=5762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201358701.598:1897): user pid=5762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201358701.598:1898): login pid=5762 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201358701.604:1899): user pid=5762 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201359661.674:1900): user pid=6064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201359661.674:1901): user pid=6064 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201359661.674:1902): login pid=6064 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201359661.683:1903): user pid=6064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201359661.689:1904): user pid=6064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201359661.689:1905): user pid=6064 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201360501.698:1906): user pid=6292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201360501.698:1907): user pid=6292 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201360501.699:1908): login pid=6292 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201360501.706:1909): user pid=6292 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201362301.063:1910): user pid=6930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201362301.064:1911): user pid=6930 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201362301.064:1912): login pid=6930 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201362301.072:1913): user pid=6930 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201363261.237:1914): user pid=7239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201363261.238:1915): user pid=7239 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201363261.238:1916): login pid=7239 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201363261.245:1917): user pid=7239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201363261.250:1918): user pid=7239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201363261.250:1919): user pid=7239 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201364101.259:1920): user pid=7473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201364101.259:1921): user pid=7473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201364101.260:1922): login pid=7473 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201364101.267:1923): user pid=7473 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201365901.292:1924): user pid=8005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201365901.292:1925): user pid=8005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201365901.293:1926): login pid=8005 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201365901.300:1927): user pid=8005 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201366861.201:1928): user pid=8325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201366861.202:1929): user pid=8325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201366861.202:1930): login pid=8325 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201366861.208:1931): user pid=8325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201366861.213:1932): user pid=8325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201366861.213:1933): user pid=8325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201367701.221:1934): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201367701.222:1935): user pid=8563 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201367701.222:1936): login pid=8563 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201367701.230:1937): user pid=8563 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201368317.613:1938): avc:  denied  { search } for  pid=8779 comm="CID.cgi" name=".tkcid" dev=dm-0 ino=23625733 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=dir
>type=AVC msg=audit(1201368317.613:1938): avc:  denied  { read } for  pid=8779 comm="CID.cgi" name="log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201368317.613:1938): arch=40000003 syscall=5 success=yes exit=3 a0=9b0bc18 a1=8000 a2=0 a3=8000 items=0 ppid=18015 pid=8779 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1201368317.613:1939): avc:  denied  { ioctl } for  pid=8779 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201368317.613:1939): arch=40000003 syscall=54 success=no exit=-25 a0=3 a1=5401 a2=bf95b6a8 a3=bf95b6e8 items=0 ppid=18015 pid=8779 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1201368317.613:1940): avc:  denied  { getattr } for  pid=8779 comm="CID.cgi" path="/home/rick/.tkcid/log" dev=dm-0 ino=23625919 scontext=system_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201368317.613:1940): arch=40000003 syscall=197 success=yes exit=0 a0=3 a1=9aef068 a2=776ff4 a3=9b05818 items=0 ppid=18015 pid=8779 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="CID.cgi" exe="/usr/bin/perl" subj=system_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201369501.645:1941): user pid=9134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201369501.646:1942): user pid=9134 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201369501.646:1943): login pid=9134 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201369501.654:1944): user pid=9134 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201370461.806:1945): user pid=9438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201370461.806:1946): user pid=9438 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201370461.807:1947): login pid=9438 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201370461.815:1948): user pid=9438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201370461.820:1949): user pid=9438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201370461.820:1950): user pid=9438 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201371301.829:1951): user pid=9667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201371301.829:1952): user pid=9667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201371301.830:1953): login pid=9667 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201371301.835:1954): user pid=9667 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201373101.088:1955): user pid=10209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201373101.089:1956): user pid=10209 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201373101.089:1957): login pid=10209 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201373101.095:1958): user pid=10209 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201374061.541:1959): user pid=10509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201374061.542:1960): user pid=10509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201374061.542:1961): login pid=10509 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201374061.548:1962): user pid=10509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201374061.553:1963): user pid=10509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201374061.553:1964): user pid=10509 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201374901.562:1965): user pid=10746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201374901.563:1966): user pid=10746 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201374901.563:1967): login pid=10746 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201374901.571:1968): user pid=10746 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201376701.614:1969): user pid=11289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201376701.614:1970): user pid=11289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201376701.615:1971): login pid=11289 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201376701.620:1972): user pid=11289 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201377661.972:1973): user pid=11590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201377661.972:1974): user pid=11590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201377661.973:1975): login pid=11590 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201377661.980:1976): user pid=11590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201377661.985:1977): user pid=11590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201377661.985:1978): user pid=11590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201378501.993:1979): user pid=11818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201378501.994:1980): user pid=11818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201378501.994:1981): login pid=11818 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201378501.999:1982): user pid=11818 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201380301.624:1983): user pid=12364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201380301.624:1984): user pid=12364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201380301.625:1985): login pid=12364 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201380301.633:1986): user pid=12364 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201381261.212:1987): user pid=12696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201381261.213:1988): user pid=12696 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201381261.213:1989): login pid=12696 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201381261.221:1990): user pid=12696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201381261.226:1991): user pid=12696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201381261.227:1992): user pid=12696 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201382101.235:1993): user pid=13006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201382101.236:1994): user pid=13006 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201382101.236:1995): login pid=13006 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201382101.244:1996): user pid=13006 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201383901.273:1997): user pid=13614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201383901.273:1998): user pid=13614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201383901.273:1999): login pid=13614 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201383901.281:2000): user pid=13614 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201384861.616:2001): user pid=13924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201384861.616:2002): user pid=13924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201384861.616:2003): login pid=13924 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201384861.625:2004): user pid=13924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201384861.631:2005): user pid=13924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201384861.631:2006): user pid=13924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201385701.640:2007): user pid=15784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201385701.640:2008): user pid=15784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201385701.640:2009): login pid=15784 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201385701.647:2010): user pid=15784 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201387501.699:2011): user pid=19254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201387501.699:2012): user pid=19254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201387501.699:2013): login pid=19254 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201387501.706:2014): user pid=19254 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201388276.234:2015): avc:  denied  { getattr } for  pid=19941 comm="cups-driverd" path="/usr/local/bin/foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
>type=SYSCALL msg=audit(1201388276.234:2015): arch=40000003 syscall=195 success=yes exit=0 a0=bfd21478 a1=40496a48 a2=402f9ff4 a3=bfd21478 items=0 ppid=5455 pid=19941 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="cups-driverd" exe="/usr/lib/cups/daemon/cups-driverd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201388276.237:2016): avc:  denied  { execute } for  pid=19942 comm="sh" name="foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
>type=AVC msg=audit(1201388276.237:2016): avc:  denied  { read } for  pid=19942 comm="sh" name="foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
>type=AVC msg=audit(1201388276.237:2016): avc:  denied  { execute_no_trans } for  pid=19942 comm="sh" path="/usr/local/bin/foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
>type=SYSCALL msg=audit(1201388276.237:2016): arch=40000003 syscall=11 success=yes exit=0 a0=8425cd0 a1=8425d70 a2=8424f98 a3=40 items=0 ppid=19941 pid=19942 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201388276.239:2017): avc:  denied  { ioctl } for  pid=19942 comm="foomatic" path="/usr/local/bin/foomatic-ppdfile" dev=dm-0 ino=44695592 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:default_t:s0 tclass=file
>type=SYSCALL msg=audit(1201388276.239:2017): arch=40000003 syscall=54 success=no exit=-25 a0=4 a1=5401 a2=bfb309e8 a3=bfb30a28 items=0 ppid=19941 pid=19942 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201388406.445:2018): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201388406.445:2018): arch=40000003 syscall=229 success=yes exit=33 a0=41e874e8 a1=402a6723 a2=42629f58 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201388406.446:2019): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201388406.490:2020): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201388406.494:2021): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201388461.549:2022): user pid=20001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201388461.550:2023): user pid=20001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201388461.550:2024): login pid=20001 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201388461.559:2025): user pid=20001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201388461.564:2026): user pid=20001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201388461.564:2027): user pid=20001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201389301.573:2028): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201389301.574:2029): user pid=20251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201389301.574:2030): login pid=20251 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201389301.583:2031): user pid=20251 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201391101.512:2032): user pid=20793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201391101.512:2033): user pid=20793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201391101.512:2034): login pid=20793 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201391101.521:2035): user pid=20793 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201392061.918:2036): user pid=21094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201392061.919:2037): user pid=21094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201392061.919:2038): login pid=21094 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201392061.925:2039): user pid=21094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201392061.930:2040): user pid=21094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201392061.931:2041): user pid=21094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201392901.939:2042): user pid=21323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201392901.940:2043): user pid=21323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201392901.940:2044): login pid=21323 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201392901.948:2045): user pid=21323 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201394701.139:2046): user pid=21880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201394701.139:2047): user pid=21880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201394701.140:2048): login pid=21880 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201394701.145:2049): user pid=21880 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201395661.610:2050): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201395661.610:2051): user pid=22181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201395661.611:2052): login pid=22181 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201395661.619:2053): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201395661.624:2054): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201395661.624:2055): user pid=22181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201396501.632:2056): user pid=22454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201396501.633:2057): user pid=22454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201396501.633:2058): login pid=22454 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201396501.639:2059): user pid=22454 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201398301.727:2060): user pid=24128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201398301.728:2061): user pid=24128 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201398301.728:2062): login pid=24128 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201398301.733:2063): user pid=24128 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201398622.480:2064): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201398622.480:2064): arch=40000003 syscall=229 success=yes exit=33 a0=42627a88 a1=402a6723 a2=42621ae8 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201398622.480:2065): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201398622.491:2066): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201398730.736:2067): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201398738.129:2068): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201399261.512:2069): user pid=26199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201399261.512:2070): user pid=26199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201399261.512:2071): login pid=26199 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201399261.520:2072): user pid=26199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201399261.525:2073): user pid=26199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201399261.525:2074): user pid=26199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201400101.534:2075): user pid=26445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201400101.535:2076): user pid=26445 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201400101.535:2077): login pid=26445 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201400101.540:2078): user pid=26445 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201401901.272:2079): user pid=26954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201401901.273:2080): user pid=26954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201401901.273:2081): login pid=26954 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201401901.280:2082): user pid=26954 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201402861.479:2083): user pid=27261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201402861.479:2084): user pid=27261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201402861.479:2085): login pid=27261 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201402861.489:2086): user pid=27261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201402861.494:2087): user pid=27261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201402861.494:2088): user pid=27261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201403701.502:2089): user pid=27490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201403701.503:2090): user pid=27490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201403701.503:2091): login pid=27490 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201403701.510:2092): user pid=27490 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201405501.732:2093): user pid=28036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201405501.733:2094): user pid=28036 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201405501.733:2095): login pid=28036 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201405501.741:2096): user pid=28036 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201406461.925:2097): user pid=28338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201406461.925:2098): user pid=28338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201406461.925:2099): login pid=28338 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201406461.932:2100): user pid=28338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201406461.937:2101): user pid=28338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201406461.937:2102): user pid=28338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201407301.946:2103): user pid=28571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201407301.947:2104): user pid=28571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201407301.947:2105): login pid=28571 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201407301.954:2106): user pid=28571 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201409101.201:2107): user pid=31712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201409101.202:2108): user pid=31712 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201409101.202:2109): login pid=31712 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201409101.210:2110): user pid=31712 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201410061.866:2111): user pid=32417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201410061.866:2112): user pid=32417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201410061.867:2113): login pid=32417 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201410061.875:2114): user pid=32417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201410061.880:2115): user pid=32417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201410061.880:2116): user pid=32417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201410901.889:2117): user pid=32655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201410901.889:2118): user pid=32655 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201410901.889:2119): login pid=32655 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201410901.898:2120): user pid=32655 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201412701.669:2121): user pid=759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201412701.670:2122): user pid=759 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201412701.670:2123): login pid=759 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201412701.679:2124): user pid=759 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201413661.036:2125): user pid=1065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201413661.036:2126): user pid=1065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201413661.036:2127): login pid=1065 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201413661.042:2128): user pid=1065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201413661.047:2129): user pid=1065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201413661.047:2130): user pid=1065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201414501.055:2131): user pid=1254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201414501.055:2132): user pid=1254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201414501.056:2133): login pid=1254 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201414501.061:2134): user pid=1254 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201416301.038:2135): user pid=1733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201416301.039:2136): user pid=1733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201416301.039:2137): login pid=1733 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201416301.044:2138): user pid=1733 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201417261.516:2139): user pid=2031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201417261.517:2140): user pid=2031 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201417261.517:2141): login pid=2031 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201417261.525:2142): user pid=2031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201417261.530:2143): user pid=2031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201417261.530:2144): user pid=2031 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201418101.539:2145): user pid=2279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201418101.539:2146): user pid=2279 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201418101.539:2147): login pid=2279 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201418101.548:2148): user pid=2279 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201419901.026:2149): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201419901.026:2150): user pid=2919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201419901.026:2151): login pid=2919 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201419901.032:2152): user pid=2919 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201420861.586:2153): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201420861.586:2154): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201420861.586:2155): login pid=3256 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201420861.595:2156): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201420861.601:2157): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201420861.601:2158): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201421701.610:2159): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201421701.611:2160): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201421701.611:2161): login pid=3534 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201421701.617:2162): user pid=3534 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201423501.430:2163): user pid=4087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201423501.431:2164): user pid=4087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201423501.431:2165): login pid=4087 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201423501.438:2166): user pid=4087 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201424461.007:2167): user pid=4403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201424461.008:2168): user pid=4403 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201424461.008:2169): login pid=4403 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201424461.015:2170): user pid=4403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201424461.020:2171): user pid=4403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201424461.020:2172): user pid=4403 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201425301.028:2173): user pid=4632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201425301.029:2174): user pid=4632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201425301.029:2175): login pid=4632 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201425301.034:2176): user pid=4632 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201427101.610:2177): user pid=5171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201427101.610:2178): user pid=5171 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201427101.610:2179): login pid=5171 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201427101.617:2180): user pid=5171 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201428061.719:2181): user pid=5473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201428061.719:2182): user pid=5473 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201428061.720:2183): login pid=5473 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201428061.726:2184): user pid=5473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201428061.731:2185): user pid=5473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201428061.731:2186): user pid=5473 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201428121.738:2187): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201428121.738:2188): user pid=5492 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201428121.739:2189): login pid=5492 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201428121.747:2190): user pid=5492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201428703.270:2191): user pid=5492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201428703.270:2192): user pid=5492 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201428901.279:2193): user pid=6679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201428901.280:2194): user pid=6679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201428901.280:2195): login pid=6679 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201428901.288:2196): user pid=6679 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201429321.134:2197): user pid=6846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201429321.134:2198): user pid=6846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201429321.134:2199): login pid=6846 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201429321.141:2200): user pid=6846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201430101.941:2201): user pid=6846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201430101.941:2202): user pid=6846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201430701.949:2203): user pid=12667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201430701.950:2204): user pid=12667 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201430701.950:2205): login pid=12667 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201430701.957:2206): user pid=12667 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201431661.546:2207): user pid=12988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201431661.547:2208): user pid=12988 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201431661.547:2209): login pid=12988 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201431661.554:2210): user pid=12988 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201431661.559:2211): user pid=12988 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201431661.559:2212): user pid=12988 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201432501.566:2213): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201432501.566:2214): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201432501.567:2215): login pid=13217 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201432501.574:2216): user pid=13217 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201432801.986:2217): user pid=13349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201432801.986:2218): user pid=13349 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201432801.987:2219): login pid=13349 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201432801.995:2220): user pid=13349 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201433401.488:2221): user pid=17015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201433401.489:2222): user pid=17015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201433401.489:2223): login pid=17015 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201433401.494:2224): user pid=17015 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201434301.552:2225): user pid=18018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201434301.552:2226): user pid=18018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201434301.552:2227): login pid=18018 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201434301.557:2228): user pid=18018 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201435261.079:2229): user pid=18320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201435261.080:2230): user pid=18320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201435261.080:2231): login pid=18320 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201435261.088:2232): user pid=18320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201435261.092:2233): user pid=18320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201435261.092:2234): user pid=18320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201436101.101:2235): user pid=18553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201436101.102:2236): user pid=18553 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201436101.102:2237): login pid=18553 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201436101.110:2238): user pid=18553 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201437901.494:2239): user pid=19201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201437901.495:2240): user pid=19201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201437901.495:2241): login pid=19201 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201437901.500:2242): user pid=19201 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201438861.060:2243): user pid=19522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201438861.060:2244): user pid=19522 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201438861.061:2245): login pid=19522 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201438861.067:2246): user pid=19522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201438861.072:2247): user pid=19522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201438861.072:2248): user pid=19522 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201439368.022:2249): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=19690 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201439701.081:2250): user pid=19780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201439701.081:2251): user pid=19781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201439701.081:2252): user pid=19780 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201439701.081:2253): login pid=19780 uid=0 old auid=4294967295 new auid=500
>type=CRED_ACQ msg=audit(1201439701.082:2254): user pid=19781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201439701.082:2255): login pid=19781 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201439701.090:2256): user pid=19780 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1201439701.090:2257): user pid=19781 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201441501.527:2258): user pid=20358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201441501.528:2259): user pid=20358 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201441501.528:2260): login pid=20358 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201441501.536:2261): user pid=20358 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201442461.030:2262): user pid=20672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201442461.031:2263): user pid=20672 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201442461.031:2264): login pid=20672 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201442461.039:2265): user pid=20672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201442461.065:2266): user pid=20672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201442461.066:2267): user pid=20672 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201443301.074:2268): user pid=20900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201443301.075:2269): user pid=20900 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201443301.075:2270): login pid=20900 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201443301.082:2271): user pid=20900 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201445101.998:2272): user pid=21634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201445101.998:2273): user pid=21634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201445101.999:2274): login pid=21634 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201445102.006:2275): user pid=21634 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201446061.570:2276): user pid=22073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201446061.570:2277): user pid=22073 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201446061.570:2278): login pid=22073 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201446061.577:2279): user pid=22073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201446061.582:2280): user pid=22073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201446061.582:2281): user pid=22073 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201446901.590:2282): user pid=22303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201446901.591:2283): user pid=22303 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201446901.591:2284): login pid=22303 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201446901.596:2285): user pid=22303 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201448701.144:2286): user pid=22979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201448701.144:2287): user pid=22979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201448701.145:2288): login pid=22979 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201448701.153:2289): user pid=22979 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201449661.808:2290): user pid=23465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201449661.808:2291): user pid=23465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201449661.809:2292): login pid=23465 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201449661.817:2293): user pid=23465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201449661.822:2294): user pid=23465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201449661.823:2295): user pid=23465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201450501.832:2296): user pid=23750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201450501.832:2297): user pid=23750 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201450501.833:2298): login pid=23750 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201450501.841:2299): user pid=23750 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201452301.311:2300): user pid=24543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201452301.311:2301): user pid=24543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201452301.311:2302): login pid=24543 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201452301.318:2303): user pid=24543 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201453261.847:2304): user pid=24866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201453261.847:2305): user pid=24866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201453261.847:2306): login pid=24866 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201453261.857:2307): user pid=24866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201453261.861:2308): user pid=24866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201453261.861:2309): user pid=24866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201454101.870:2310): user pid=25094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201454101.871:2311): user pid=25094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201454101.871:2312): login pid=25094 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201454101.879:2313): user pid=25094 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201455901.378:2314): user pid=25618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201455901.379:2315): user pid=25618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201455901.379:2316): login pid=25618 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201455901.384:2317): user pid=25618 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201456861.896:2318): user pid=25924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201456861.896:2319): user pid=25924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201456861.896:2320): login pid=25924 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201456861.907:2321): user pid=25924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201456861.912:2322): user pid=25924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201456861.912:2323): user pid=25924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201457701.921:2324): user pid=26161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201457701.921:2325): user pid=26161 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201457701.921:2326): login pid=26161 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201457701.929:2327): user pid=26161 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201459501.567:2328): user pid=26688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201459501.568:2329): user pid=26688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201459501.568:2330): login pid=26688 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201459501.575:2331): user pid=26688 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201460461.847:2332): user pid=26987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201460461.848:2333): user pid=26987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201460461.848:2334): login pid=26987 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201460461.855:2335): user pid=26987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201460461.860:2336): user pid=26987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201460461.860:2337): user pid=26987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201461301.869:2338): user pid=27215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201461301.869:2339): user pid=27215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201461301.869:2340): login pid=27215 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201461301.878:2341): user pid=27215 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201463101.200:2342): user pid=27743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201463101.201:2343): user pid=27743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201463101.201:2344): login pid=27743 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201463101.206:2345): user pid=27743 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201464061.530:2346): user pid=28049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201464061.531:2347): user pid=28049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201464061.531:2348): login pid=28049 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201464061.538:2349): user pid=28049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201464061.543:2350): user pid=28049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201464061.543:2351): user pid=28049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201464901.551:2352): user pid=28280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201464901.551:2353): user pid=28280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201464901.552:2354): login pid=28280 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201464901.559:2355): user pid=28280 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201466701.544:2356): user pid=28809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201466701.544:2357): user pid=28809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201466701.545:2358): login pid=28809 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201466701.551:2359): user pid=28809 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201467661.383:2360): user pid=29111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201467661.383:2361): user pid=29111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201467661.384:2362): login pid=29111 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201467661.392:2363): user pid=29111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201467661.397:2364): user pid=29111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201467661.397:2365): user pid=29111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201468501.406:2366): user pid=29339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201468501.406:2367): user pid=29339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201468501.406:2368): login pid=29339 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201468501.412:2369): user pid=29339 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201470301.844:2370): user pid=29866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201470301.844:2371): user pid=29866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201470301.845:2372): login pid=29866 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201470301.850:2373): user pid=29866 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201471261.795:2374): user pid=30167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201471261.795:2375): user pid=30167 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201471261.796:2376): login pid=30167 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201471261.804:2377): user pid=30167 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201471261.809:2378): user pid=30167 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201471261.809:2379): user pid=30167 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201472101.818:2380): user pid=30398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201472101.818:2381): user pid=30398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201472101.819:2382): login pid=30398 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201472101.825:2383): user pid=30398 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201473901.667:2384): user pid=30947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201473901.668:2385): user pid=30947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201473901.669:2386): login pid=30947 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201473901.675:2387): user pid=30947 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201474278.338:2388): avc:  denied  { write } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201474278.338:2388): arch=40000003 syscall=5 success=yes exit=21 a0=41e83f45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201474685.131:2389): avc:  denied  { getattr } for  pid=5455 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201474685.131:2389): arch=40000003 syscall=229 success=yes exit=33 a0=42649c48 a1=402a6723 a2=4262dba8 a3=ff items=0 ppid=1 pid=5455 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201474685.132:2390): user pid=5455 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201474861.060:2391): user pid=31346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201474861.061:2392): user pid=31346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201474861.061:2393): login pid=31346 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201474861.070:2394): user pid=31346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201474861.075:2395): user pid=31346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201474861.076:2396): user pid=31346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201475701.084:2397): user pid=31986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201475701.085:2398): user pid=31986 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201475701.085:2399): login pid=31986 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201475701.093:2400): user pid=31986 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201477501.490:2401): user pid=32543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201477501.491:2402): user pid=32543 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201477501.491:2403): login pid=32543 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201477501.498:2404): user pid=32543 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201478461.492:2405): user pid=378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201478461.492:2406): user pid=378 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201478461.492:2407): login pid=378 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201478461.500:2408): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201478461.505:2409): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201478461.506:2410): user pid=378 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201479301.514:2411): user pid=618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201479301.515:2412): user pid=618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201479301.515:2413): login pid=618 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201479301.523:2414): user pid=618 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201481101.592:2415): user pid=1312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201481101.593:2416): user pid=1312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201481101.593:2417): login pid=1312 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201481101.598:2418): user pid=1312 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201482061.139:2419): user pid=1635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201482061.139:2420): user pid=1635 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201482061.140:2421): login pid=1635 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201482061.148:2422): user pid=1635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201482061.153:2423): user pid=1635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201482061.153:2424): user pid=1635 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201482901.160:2425): user pid=1975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201482901.161:2426): user pid=1975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201482901.161:2427): login pid=1975 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201482901.168:2428): user pid=1975 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201484701.878:2429): user pid=2848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201484701.879:2430): user pid=2848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201484701.879:2431): login pid=2848 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201484701.887:2432): user pid=2848 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201485661.085:2433): user pid=3487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201485661.085:2434): user pid=3487 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201485661.086:2435): login pid=3487 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201485661.094:2436): user pid=3487 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201485661.098:2437): user pid=3487 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201485661.098:2438): user pid=3487 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201486501.106:2439): user pid=3735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201486501.106:2440): user pid=3735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201486501.106:2441): login pid=3735 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201486501.112:2442): user pid=3735 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201488301.711:2443): user pid=4312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201488301.711:2444): user pid=4312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201488301.712:2445): login pid=4312 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201488301.718:2446): user pid=4312 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201489261.117:2447): user pid=4618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201489261.118:2448): user pid=4618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201489261.118:2449): login pid=4618 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201489261.127:2450): user pid=4618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201489261.132:2451): user pid=4618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201489261.132:2452): user pid=4618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201490101.141:2453): user pid=4851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201490101.142:2454): user pid=4851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201490101.142:2455): login pid=4851 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201490101.148:2456): user pid=4851 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201491901.678:2457): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201491901.679:2458): user pid=5381 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201491901.679:2459): login pid=5381 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201491901.685:2460): user pid=5381 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201492861.104:2461): user pid=5684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201492861.104:2462): user pid=5684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201492861.104:2463): login pid=5684 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201492861.112:2464): user pid=5684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201492861.117:2465): user pid=5684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201492861.117:2466): user pid=5684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201493701.126:2467): user pid=5931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201493701.126:2468): user pid=5931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201493701.127:2469): login pid=5931 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201493701.133:2470): user pid=5931 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201495501.992:2471): user pid=6781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201495501.992:2472): user pid=6781 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201495501.992:2473): login pid=6781 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201495501.997:2474): user pid=6781 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201496461.904:2475): user pid=7909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201496461.904:2476): user pid=7909 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201496461.905:2477): login pid=7909 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201496461.914:2478): user pid=7909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201496461.918:2479): user pid=7909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201496461.918:2480): user pid=7909 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201497301.927:2481): user pid=8153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201497301.928:2482): user pid=8153 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201497301.928:2483): login pid=8153 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201497301.936:2484): user pid=8153 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201499101.237:2485): user pid=8703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201499101.238:2486): user pid=8703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201499101.238:2487): login pid=8703 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201499101.246:2488): user pid=8703 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201500061.185:2489): user pid=9010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201500061.185:2490): user pid=9010 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201500061.186:2491): login pid=9010 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201500061.191:2492): user pid=9010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201500061.196:2493): user pid=9010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201500061.196:2494): user pid=9010 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201500901.204:2495): user pid=9244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201500901.205:2496): user pid=9244 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201500901.205:2497): login pid=9244 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201500901.212:2498): user pid=9244 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201502701.997:2499): user pid=9892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201502701.998:2500): user pid=9892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201502701.998:2501): login pid=9892 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201502702.006:2502): user pid=9892 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201503661.339:2503): user pid=10201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201503661.339:2504): user pid=10201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201503661.340:2505): login pid=10201 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201503661.348:2506): user pid=10201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201503661.352:2507): user pid=10201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201503661.352:2508): user pid=10201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201504501.360:2509): user pid=10429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201504501.360:2510): user pid=10429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201504501.360:2511): login pid=10429 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201504501.366:2512): user pid=10429 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201506301.824:2513): user pid=10960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201506301.824:2514): user pid=10960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201506301.824:2515): login pid=10960 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201506301.833:2516): user pid=10960 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201507261.641:2517): user pid=11265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201507261.642:2518): user pid=11265 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201507261.642:2519): login pid=11265 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201507261.648:2520): user pid=11265 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201507261.652:2521): user pid=11265 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201507261.653:2522): user pid=11265 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201508101.661:2523): user pid=11493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201508101.662:2524): user pid=11493 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201508101.662:2525): login pid=11493 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201508101.670:2526): user pid=11493 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201509001.704:2527): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201509001.705:2528): user pid=11787 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201509001.705:2529): login pid=11787 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201509001.713:2530): user pid=11787 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201509901.705:2531): user pid=26238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201509901.706:2532): user pid=26238 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201509901.706:2533): login pid=26238 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201509901.715:2534): user pid=26238 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201510861.531:2535): user pid=8312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201510861.532:2536): user pid=8312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201510861.532:2537): login pid=8312 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201510861.538:2538): user pid=8312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201510861.544:2539): user pid=8312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201510861.544:2540): user pid=8312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201511701.552:2541): user pid=4469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201511701.552:2542): user pid=4469 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201511701.553:2543): login pid=4469 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201511701.556:2544): user pid=4469 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201513501.576:2545): user pid=5166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201513501.577:2546): user pid=5166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201513501.577:2547): login pid=5166 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201513501.582:2548): user pid=5166 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201514461.515:2549): user pid=5603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201514461.516:2550): user pid=5603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201514461.516:2551): login pid=5603 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201514461.524:2552): user pid=5603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201514461.529:2553): user pid=5603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201514461.529:2554): user pid=5603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201514521.536:2555): user pid=5634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201514521.536:2556): user pid=5634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201514521.536:2557): login pid=5634 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201514521.543:2558): user pid=5634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201515057.928:2559): user pid=5634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201515057.929:2560): user pid=5634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201515301.938:2561): user pid=6653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201515301.939:2562): user pid=6653 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201515301.939:2563): login pid=6653 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201515301.946:2564): user pid=6653 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201515969.889:2565): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201515969.889:2566): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201515969.966:2567): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201516230.649:2568): user pid=7424 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201516230.655:2569): user pid=7424 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201516232.524:2570): user pid=7427 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201516232.667:2571): user pid=7430 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201516232.679:2572): user pid=7431 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201516232.742:2573): user pid=7435 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201516284.008:2574): avc:  denied  { getattr } for  pid=7558 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201516284.008:2574): arch=40000003 syscall=229 success=yes exit=33 a0=b961cba8 a1=32c723 a2=b961cbc0 a3=ff items=0 ppid=7557 pid=7558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.008:2575): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.018:2576): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.023:2577): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.065:2578): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.077:2579): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.080:2580): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.084:2581): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.087:2582): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.113:2583): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201516284.120:2584): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201516895.385:2585): user pid=7280 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201517101.088:2586): user pid=7933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201517101.089:2587): user pid=7933 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201517101.089:2588): login pid=7933 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201517101.094:2589): user pid=7933 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201517516.021:2590): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8091 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201518061.578:2591): user pid=8242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201518061.579:2592): user pid=8242 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201518061.579:2593): login pid=8242 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201518061.586:2594): user pid=8242 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201518061.591:2595): user pid=8242 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201518061.591:2596): user pid=8242 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201518901.600:2597): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201518901.601:2598): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201518901.601:2599): login pid=8470 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201518901.606:2600): user pid=8470 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201519201.070:2601): user pid=8594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201519201.070:2602): user pid=8594 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201519201.070:2603): login pid=8594 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201519201.078:2604): user pid=8594 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201519801.496:2605): user pid=12390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201519801.497:2606): user pid=12390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201519801.497:2607): login pid=12390 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201519801.504:2608): user pid=12390 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201520701.682:2609): user pid=13396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201520701.683:2610): user pid=13396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201520701.683:2611): login pid=13396 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201520701.690:2612): user pid=13396 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201521661.700:2613): user pid=13703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201521661.700:2614): user pid=13703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201521661.700:2615): login pid=13703 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201521661.709:2616): user pid=13703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201521661.713:2617): user pid=13703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201521661.713:2618): user pid=13703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201522501.722:2619): user pid=13931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201522501.723:2620): user pid=13931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201522501.723:2621): login pid=13931 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201522501.731:2622): user pid=13931 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201523686.643:2623): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=14295 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201524301.219:2624): user pid=14491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201524301.219:2625): user pid=14491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201524301.219:2626): login pid=14491 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201524301.227:2627): user pid=14491 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201525261.204:2628): user pid=14796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201525261.205:2629): user pid=14796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201525261.205:2630): login pid=14796 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201525261.213:2631): user pid=14796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201525261.218:2632): user pid=14796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201525261.218:2633): user pid=14796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201526101.227:2634): user pid=15027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201526101.228:2635): user pid=15027 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201526101.229:2636): login pid=15027 uid=0 old auid=4294967295 new auid=500
>type=USER_ACCT msg=audit(1201526101.229:2637): user pid=15026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201526101.230:2638): user pid=15026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201526101.230:2639): login pid=15026 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201526101.236:2640): user pid=15027 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1201526101.238:2641): user pid=15026 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201526101.372:2642): avc:  denied  { write } for  pid=15047 comm="rpc.statd" path="pipe:[2056216]" dev=pipefs ino=2056216 scontext=system_u:system_r:rpcd_t:s0 tcontext=system_u:system_r:automount_t:s0 tclass=fifo_file
>type=SYSCALL msg=audit(1201526101.372:2642): arch=40000003 syscall=11 success=yes exit=0 a0=969c4a0 a1=969c340 a2=969c4c8 a3=969c340 items=0 ppid=15046 pid=15047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rpc.statd" exe="/sbin/rpc.statd" subj=system_u:system_r:rpcd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201527901.867:2643): user pid=15587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201527901.890:2644): user pid=15587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201527901.890:2645): login pid=15587 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201527901.895:2646): user pid=15587 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201528861.981:2647): user pid=15894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201528861.981:2648): user pid=15894 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201528861.981:2649): login pid=15894 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201528861.989:2650): user pid=15894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201528862.013:2651): user pid=15894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201528862.013:2652): user pid=15894 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201529701.022:2653): user pid=16124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201529701.023:2654): user pid=16124 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201529701.023:2655): login pid=16124 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201529701.031:2656): user pid=16124 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201531501.104:2657): user pid=16658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201531501.105:2658): user pid=16658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201531501.105:2659): login pid=16658 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201531501.112:2660): user pid=16658 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201532461.329:2661): user pid=16973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201532461.330:2662): user pid=16973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201532461.330:2663): login pid=16973 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201532461.337:2664): user pid=16973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201532461.342:2665): user pid=16973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201532461.342:2666): user pid=16973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201533301.350:2667): user pid=17695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201533301.351:2668): user pid=17695 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201533301.351:2669): login pid=17695 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201533301.358:2670): user pid=17695 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201535101.336:2671): user pid=18616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201535101.337:2672): user pid=18616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201535101.337:2673): login pid=18616 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201535101.345:2674): user pid=18616 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201536062.004:2675): user pid=18964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201536062.005:2676): user pid=18964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201536062.005:2677): login pid=18964 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201536062.011:2678): user pid=18964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201536062.016:2679): user pid=18964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201536062.016:2680): user pid=18964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201536901.023:2681): user pid=19226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201536901.024:2682): user pid=19226 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201536901.025:2683): login pid=19226 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201536901.029:2684): user pid=19226 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201538701.113:2685): user pid=19847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201538701.113:2686): user pid=19847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201538701.113:2687): login pid=19847 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201538701.120:2688): user pid=19847 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201539661.615:2689): user pid=20319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201539661.615:2690): user pid=20319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201539661.616:2691): login pid=20319 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201539661.625:2692): user pid=20319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201539661.632:2693): user pid=20319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201539661.632:2694): user pid=20319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201540501.641:2695): user pid=20675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201540501.641:2696): user pid=20675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201540501.641:2697): login pid=20675 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201540501.650:2698): user pid=20675 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201541454.834:2699): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)'
>type=USER_ACCT msg=audit(1201541454.837:2700): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)'
>type=CRED_ACQ msg=audit(1201541454.847:2701): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)'
>type=USER_START msg=audit(1201541454.848:2702): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)'
>type=USER_END msg=audit(1201541454.848:2703): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/24 res=success)'
>type=USER_CMD msg=audit(1201541454.848:2704): user pid=21064 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/home/rick" cmd="/usr/bin/yum" (terminal=pts/24 res=success)'
>type=USER_ACCT msg=audit(1201542301.908:2705): user pid=22589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201542301.909:2706): user pid=22589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201542301.909:2707): login pid=22589 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201542301.932:2708): user pid=22589 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201543261.866:2709): user pid=23049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201543261.866:2710): user pid=23049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201543261.867:2711): login pid=23049 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201543261.872:2712): user pid=23049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201543261.979:2713): user pid=23049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201543261.980:2714): user pid=23049 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201544101.988:2715): user pid=23461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201544101.989:2716): user pid=23461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201544101.989:2717): login pid=23461 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201544101.994:2718): user pid=23461 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201544223.564:2719): user pid=23549 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=rick exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201544223.565:2720): user pid=23549 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=rick exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201545901.446:2721): user pid=24345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201545901.447:2722): user pid=24345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201545901.447:2723): login pid=24345 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201545901.454:2724): user pid=24345 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201546861.303:2725): user pid=24689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201546861.303:2726): user pid=24689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201546861.303:2727): login pid=24689 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201546861.310:2728): user pid=24689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201546861.314:2729): user pid=24689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201546861.314:2730): user pid=24689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201547701.323:2731): user pid=24952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201547701.323:2732): user pid=24952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201547701.324:2733): login pid=24952 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201547701.331:2734): user pid=24952 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201549501.677:2735): user pid=25520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201549501.677:2736): user pid=25520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201549501.678:2737): login pid=25520 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201549501.684:2738): user pid=25520 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201550461.646:2739): user pid=26467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201550461.646:2740): user pid=26467 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201550461.646:2741): login pid=26467 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201550461.652:2742): user pid=26467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201550461.658:2743): user pid=26467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201550461.658:2744): user pid=26467 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201551301.667:2745): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201551301.667:2746): user pid=26704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201551301.667:2747): login pid=26704 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201551301.674:2748): user pid=26704 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201553101.284:2749): user pid=27245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201553101.285:2750): user pid=27245 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201553101.285:2751): login pid=27245 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201553101.291:2752): user pid=27245 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201554061.636:2753): user pid=27915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201554061.636:2754): user pid=27915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201554061.637:2755): login pid=27915 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201554061.646:2756): user pid=27915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201554061.650:2757): user pid=27915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201554061.650:2758): user pid=27915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201554901.658:2759): user pid=28264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201554901.659:2760): user pid=28264 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201554901.659:2761): login pid=28264 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201554901.666:2762): user pid=28264 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201555219.535:2763): avc:  denied  { getattr } for  pid=7558 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201555219.535:2763): arch=40000003 syscall=229 success=yes exit=33 a0=b9db28c8 a1=32c723 a2=b96262c0 a3=ff items=0 ppid=1 pid=7558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201555219.536:2764): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201555219.614:2765): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201555235.218:2766): user pid=7558 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201555271.374:2767): avc:  denied  { write } for  pid=7558 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201555271.374:2767): arch=40000003 syscall=5 success=yes exit=22 a0=b960bf45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=7558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201555271.455:2768): avc:  denied  { ioctl } for  pid=29543 comm="foomatic-rip" path="/home/rick/prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201555271.455:2768): arch=40000003 syscall=54 success=no exit=-25 a0=1 a1=5401 a2=bfce92f8 a3=bfce9338 items=0 ppid=7558 pid=29543 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="foomatic-rip" exe="/usr/bin/perl" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_ABEND msg=audit(1201556634.322:2769): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=30423 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201556701.084:2770): user pid=30442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201556701.085:2771): user pid=30442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201556701.085:2772): login pid=30442 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201556701.091:2773): user pid=30442 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201557661.301:2774): user pid=30744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201557661.301:2775): user pid=30744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201557661.302:2776): login pid=30744 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201557661.310:2777): user pid=30744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201557661.314:2778): user pid=30744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201557661.314:2779): user pid=30744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201558501.322:2780): user pid=30974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201558501.322:2781): user pid=30974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201558501.322:2782): login pid=30974 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201558501.329:2783): user pid=30974 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201558686.680:2784): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=31077 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201560301.539:2785): user pid=31624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201560301.539:2786): user pid=31624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201560301.540:2787): login pid=31624 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201560301.548:2788): user pid=31624 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201561261.201:2789): user pid=32180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201561261.202:2790): user pid=32180 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201561261.202:2791): login pid=32180 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201561261.206:2792): user pid=32180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201561261.210:2793): user pid=32180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201561261.210:2794): user pid=32180 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1201561516.516:2795): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1201561516.522:2796): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1201561520.254:2797): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201561520.355:2798): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1201561520.453:2799): user pid=32260 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1201561520.455:2800): login pid=32260 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201561520.518:2801): user pid=32260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1201561520.649:2802): user pid=32265 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1201561520.970:2803): user pid=32260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1201561521.071:2804): user pid=32260 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1201561635.585:2805): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1201561635.590:2806): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1201561638.767:2807): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201561638.869:2808): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1201561638.942:2809): user pid=32335 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1201561638.943:2810): login pid=32335 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201561639.049:2811): user pid=32335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1201561639.180:2812): user pid=32339 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1201561639.498:2813): user pid=32335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1201561639.568:2814): user pid=32335 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201562101.220:2815): user pid=32509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201562101.221:2816): user pid=32509 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201562101.221:2817): login pid=32509 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201562101.230:2818): user pid=32509 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201563901.014:2819): user pid=668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201563901.014:2820): user pid=668 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201563901.014:2821): login pid=668 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201563901.022:2822): user pid=668 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201564861.334:2823): user pid=1034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201564861.335:2824): user pid=1034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201564861.335:2825): login pid=1034 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201564861.344:2826): user pid=1034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201564861.349:2827): user pid=1034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201564861.349:2828): user pid=1034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201565701.358:2829): user pid=1339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201565701.359:2830): user pid=1339 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201565701.359:2831): login pid=1339 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201565701.366:2832): user pid=1339 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201567501.100:2833): user pid=1980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201567501.100:2834): user pid=1980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201567501.101:2835): login pid=1980 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201567501.108:2836): user pid=1980 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201568461.191:2837): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201568461.191:2838): user pid=2305 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201568461.191:2839): login pid=2305 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201568461.196:2840): user pid=2305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201568461.200:2841): user pid=2305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201568461.201:2842): user pid=2305 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201569301.209:2843): user pid=2572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201569301.209:2844): user pid=2572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201569301.209:2845): login pid=2572 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201569301.215:2846): user pid=2572 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201571101.930:2847): user pid=3223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201571101.931:2848): user pid=3223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201571101.931:2849): login pid=3223 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201571101.936:2850): user pid=3223 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201572061.789:2851): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201572061.789:2852): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201572061.790:2853): login pid=3581 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201572061.799:2854): user pid=3581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201572061.804:2855): user pid=3581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201572061.804:2856): user pid=3581 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201572901.812:2857): user pid=3826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201572901.812:2858): user pid=3826 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201572901.813:2859): login pid=3826 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201572901.818:2860): user pid=3826 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201574701.037:2861): user pid=4390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201574701.038:2862): user pid=4390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201574701.038:2863): login pid=4390 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201574701.045:2864): user pid=4390 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201575661.785:2865): user pid=4694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201575661.786:2866): user pid=4694 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201575661.786:2867): login pid=4694 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201575661.793:2868): user pid=4694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201575661.797:2869): user pid=4694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201575661.797:2870): user pid=4694 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201576501.805:2871): user pid=4926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201576501.806:2872): user pid=4926 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201576501.806:2873): login pid=4926 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201576501.814:2874): user pid=4926 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201578038.573:2875): avc:  denied  { getattr } for  pid=6135 comm="httpd" path="/home/rick/photos/index.rss" dev=dm-0 ino=23790434 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1201578038.573:2875): arch=40000003 syscall=195 success=yes exit=0 a0=b99d49b0 a1=bfd787ec a2=52bff4 a3=8170 items=0 ppid=2681 pid=6135 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=AVC msg=audit(1201578038.624:2876): avc:  denied  { read } for  pid=6135 comm="httpd" name="index.rss" dev=dm-0 ino=23790434 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file
>type=SYSCALL msg=audit(1201578038.624:2876): arch=40000003 syscall=5 success=yes exit=17 a0=b99d4a58 a1=8000 a2=1b6 a3=8000 items=0 ppid=2681 pid=6135 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201578301.038:2877): user pid=5491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201578301.038:2878): user pid=5491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201578301.039:2879): login pid=5491 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201578301.046:2880): user pid=5491 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201579261.011:2881): user pid=5872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201579261.012:2882): user pid=5872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201579261.012:2883): login pid=5872 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201579261.019:2884): user pid=5872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201579261.023:2885): user pid=5872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201579261.024:2886): user pid=5872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201580101.031:2887): user pid=6143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201580101.032:2888): user pid=6143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201580101.032:2889): login pid=6143 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201580101.039:2890): user pid=6143 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201581901.848:2891): user pid=7320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201581901.849:2892): user pid=7320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201581901.849:2893): login pid=7320 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201581901.855:2894): user pid=7320 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201582861.890:2895): user pid=7756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201582861.891:2896): user pid=7756 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201582861.891:2897): login pid=7756 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201582861.897:2898): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201582861.903:2899): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201582861.904:2900): user pid=7756 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201583701.912:2901): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201583701.913:2902): user pid=8113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201583701.913:2903): login pid=8113 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201583701.920:2904): user pid=8113 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201585035.587:2905): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=8541 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201585501.413:2906): user pid=8674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201585501.414:2907): user pid=8674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201585501.415:2908): login pid=8674 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201585501.419:2909): user pid=8674 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201586461.549:2910): user pid=8995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201586461.549:2911): user pid=8995 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201586461.549:2912): login pid=8995 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201586461.555:2913): user pid=8995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201586461.560:2914): user pid=8995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201586461.560:2915): user pid=8995 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201587301.569:2916): user pid=9237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201587301.569:2917): user pid=9237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201587301.569:2918): login pid=9237 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201587301.577:2919): user pid=9237 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201587992.770:2920): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201587992.770:2921): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201587992.804:2922): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201588279.220:2923): user pid=9477 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201588317.390:2924): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201588317.390:2925): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201588317.399:2926): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201588521.044:2927): user pid=9577 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201589101.140:2928): user pid=9837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201589101.141:2929): user pid=9837 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201589101.141:2930): login pid=9837 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201589101.148:2931): user pid=9837 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201590061.383:2932): user pid=10143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201590061.383:2933): user pid=10143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201590061.383:2934): login pid=10143 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201590061.392:2935): user pid=10143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201590061.397:2936): user pid=10143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201590061.397:2937): user pid=10143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201590901.406:2938): user pid=10368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201590901.406:2939): user pid=10368 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201590901.407:2940): login pid=10368 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201590901.414:2941): user pid=10368 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201592701.426:2942): user pid=10893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201592701.427:2943): user pid=10893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201592701.427:2944): login pid=10893 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201592701.434:2945): user pid=10893 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201593661.802:2946): user pid=11201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201593661.803:2947): user pid=11201 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201593661.803:2948): login pid=11201 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201593661.809:2949): user pid=11201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201593661.813:2950): user pid=11201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201593661.813:2951): user pid=11201 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201594501.822:2952): user pid=11426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201594501.822:2953): user pid=11426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201594501.822:2954): login pid=11426 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201594501.830:2955): user pid=11426 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201596301.988:2956): user pid=11955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201596301.988:2957): user pid=11955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201596301.989:2958): login pid=11955 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201596301.996:2959): user pid=11955 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201597261.893:2960): user pid=12255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201597261.893:2961): user pid=12255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201597261.893:2962): login pid=12255 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201597261.902:2963): user pid=12255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201597261.907:2964): user pid=12255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201597261.907:2965): user pid=12255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201598101.916:2966): user pid=12481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201598101.916:2967): user pid=12481 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201598101.917:2968): login pid=12481 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201598101.925:2969): user pid=12481 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201599901.135:2970): user pid=13071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201599901.136:2971): user pid=13071 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201599901.137:2972): login pid=13071 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201599901.142:2973): user pid=13071 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201600861.058:2974): user pid=13437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201600861.058:2975): user pid=13437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201600861.059:2976): login pid=13437 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201600861.067:2977): user pid=13437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201600861.072:2978): user pid=13437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201600861.072:2979): user pid=13437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201600921.079:2980): user pid=13454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201600921.079:2981): user pid=13454 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201600921.080:2982): login pid=13454 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201600921.088:2983): user pid=13454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201601690.567:2984): user pid=13454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201601690.568:2985): user pid=13454 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201601701.596:2986): user pid=16464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201601701.597:2987): user pid=16464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201601701.597:2988): login pid=16464 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201601701.606:2989): user pid=16464 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201603501.165:2990): user pid=17005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201603501.166:2991): user pid=17005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201603501.167:2992): login pid=17005 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201603501.172:2993): user pid=17005 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201604461.994:2994): user pid=17300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201604461.995:2995): user pid=17300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201604461.995:2996): login pid=17300 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201604462.001:2997): user pid=17300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201604462.007:2998): user pid=17300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201604462.007:2999): user pid=17300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201605301.016:3000): user pid=17531 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201605301.016:3001): user pid=17531 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201605301.017:3002): login pid=17531 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201605301.024:3003): user pid=17531 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201605601.496:3004): user pid=17639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201605601.497:3005): user pid=17639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201605601.497:3006): login pid=17639 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201605601.504:3007): user pid=17639 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201606201.497:3008): user pid=17891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201606201.498:3009): user pid=17891 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201606201.498:3010): login pid=17891 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201606201.505:3011): user pid=17891 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201607101.116:3012): user pid=18587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201607101.116:3013): user pid=18587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201607101.117:3014): login pid=18587 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201607101.125:3015): user pid=18587 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201608061.020:3016): user pid=18899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201608061.021:3017): user pid=18899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201608061.021:3018): login pid=18899 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201608061.029:3019): user pid=18899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201608061.034:3020): user pid=18899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201608061.034:3021): user pid=18899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201608901.043:3022): user pid=19126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201608901.043:3023): user pid=19126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201608901.043:3024): login pid=19126 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201608901.050:3025): user pid=19126 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201610701.574:3026): user pid=19654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201610701.575:3027): user pid=19654 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201610701.575:3028): login pid=19654 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201610701.582:3029): user pid=19654 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201611661.858:3030): user pid=19959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201611661.858:3031): user pid=19959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201611661.858:3032): login pid=19959 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201611661.867:3033): user pid=19959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201611661.872:3034): user pid=19959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201611661.872:3035): user pid=19959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201612501.882:3036): user pid=20187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201612501.882:3037): user pid=20187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201612501.882:3038): login pid=20187 uid=0 old auid=4294967295 new auid=500
>type=USER_ACCT msg=audit(1201612501.884:3039): user pid=20186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201612501.885:3040): user pid=20186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201612501.885:3041): login pid=20186 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201612501.891:3042): user pid=20187 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1201612501.891:3043): user pid=20186 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201614301.668:3044): user pid=20729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201614301.690:3045): user pid=20729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201614301.691:3046): login pid=20729 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201614301.696:3047): user pid=20729 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201615261.943:3048): user pid=21130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201615261.943:3049): user pid=21130 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201615261.943:3050): login pid=21130 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201615261.950:3051): user pid=21130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201615261.979:3052): user pid=21130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201615261.980:3053): user pid=21130 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201616101.989:3054): user pid=21371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201616101.989:3055): user pid=21371 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201616101.989:3056): login pid=21371 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201616101.996:3057): user pid=21371 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201617902.004:3058): user pid=21987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201617902.004:3059): user pid=21987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201617902.004:3060): login pid=21987 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201617902.010:3061): user pid=21987 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201618861.070:3062): user pid=22297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201618861.070:3063): user pid=22297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201618861.071:3064): login pid=22297 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201618861.077:3065): user pid=22297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201618861.082:3066): user pid=22297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201618861.082:3067): user pid=22297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201619701.091:3068): user pid=22604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201619701.092:3069): user pid=22604 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201619701.092:3070): login pid=22604 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201619701.097:3071): user pid=22604 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201621501.864:3072): user pid=23210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201621501.864:3073): user pid=23210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201621501.864:3074): login pid=23210 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201621501.873:3075): user pid=23210 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201622461.211:3076): user pid=24800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201622461.212:3077): user pid=24800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201622461.212:3078): login pid=24800 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201622461.220:3079): user pid=24800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201622461.225:3080): user pid=24800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201622461.225:3081): user pid=24800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201623301.234:3082): user pid=25050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201623301.234:3083): user pid=25050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201623301.234:3084): login pid=25050 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201623301.242:3085): user pid=25050 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201625101.606:3086): user pid=25788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201625101.606:3087): user pid=25788 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201625101.607:3088): login pid=25788 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201625101.616:3089): user pid=25788 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201625968.963:3090): user pid=26137 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1201625969.002:3091): user pid=26137 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=LOGIN msg=audit(1201625969.003:3092): login pid=26137 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201625969.004:3093): user pid=26137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1201625969.005:3094): user pid=26140 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1201625969.614:3095): user pid=26137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_END msg=audit(1201625969.615:3096): user pid=26137 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=ipcroe, addr=192.168.1.99, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201626061.296:3097): user pid=26223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201626061.297:3098): user pid=26223 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201626061.298:3099): login pid=26223 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201626061.304:3100): user pid=26223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201626061.310:3101): user pid=26223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201626061.310:3102): user pid=26223 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201626901.318:3103): user pid=26521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201626901.318:3104): user pid=26521 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201626901.318:3105): login pid=26521 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201626901.326:3106): user pid=26521 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201626949.068:3107): avc:  denied  { getattr } for  pid=26588 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201626949.068:3107): arch=40000003 syscall=229 success=yes exit=33 a0=b881cba8 a1=32c723 a2=b881cbc0 a3=ff items=0 ppid=26587 pid=26588 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.069:3108): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.096:3109): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.122:3110): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.139:3111): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.151:3112): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.156:3113): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.160:3114): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.164:3115): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.179:3116): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201626949.186:3117): user pid=26588 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1201627032.527:3118): avc:  denied  { write } for  pid=26588 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201627032.527:3118): arch=40000003 syscall=5 success=yes exit=20 a0=b880bf45 a1=8241 a2=180 a3=8241 items=0 ppid=1 pid=26588 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.919:3119): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.922:3120): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.927:3121): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.930:3122): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.933:3123): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.937:3124): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.940:3125): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.943:3126): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.946:3127): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201627441.949:3128): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201628701.208:3129): user pid=27158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201628701.209:3130): user pid=27158 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201628701.209:3131): login pid=27158 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201628701.214:3132): user pid=27158 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201629661.575:3133): user pid=27536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201629661.576:3134): user pid=27536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201629661.576:3135): login pid=27536 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201629661.582:3136): user pid=27536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201629661.588:3137): user pid=27536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201629661.588:3138): user pid=27536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201630501.596:3139): user pid=27783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201630501.597:3140): user pid=27783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201630501.597:3141): login pid=27783 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201630501.602:3142): user pid=27783 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201632301.316:3143): user pid=28325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201632301.317:3144): user pid=28325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201632301.317:3145): login pid=28325 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201632301.330:3146): user pid=28325 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201633261.412:3147): user pid=28647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201633261.413:3148): user pid=28647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201633261.413:3149): login pid=28647 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201633261.421:3150): user pid=28647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201633261.426:3151): user pid=28647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201633261.426:3152): user pid=28647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201634101.435:3153): user pid=28877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201634101.435:3154): user pid=28877 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201634101.435:3155): login pid=28877 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201634101.444:3156): user pid=28877 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201635901.921:3157): user pid=29405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201635901.922:3158): user pid=29405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201635901.922:3159): login pid=29405 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201635901.927:3160): user pid=29405 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201636861.996:3161): user pid=29713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201636861.997:3162): user pid=29713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201636861.997:3163): login pid=29713 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201636862.006:3164): user pid=29713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201636862.011:3165): user pid=29713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201636862.011:3166): user pid=29713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201637701.021:3167): user pid=29980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201637701.022:3168): user pid=29980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201637701.022:3169): login pid=29980 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201637701.027:3170): user pid=29980 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201639501.574:3171): user pid=30564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201639501.574:3172): user pid=30564 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201639501.575:3173): login pid=30564 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201639501.583:3174): user pid=30564 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201640461.933:3175): user pid=30881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201640461.933:3176): user pid=30881 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201640461.933:3177): login pid=30881 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201640461.938:3178): user pid=30881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201640461.943:3179): user pid=30881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201640461.943:3180): user pid=30881 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201641301.951:3181): user pid=31185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201641301.951:3182): user pid=31185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201641301.951:3183): login pid=31185 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201641301.959:3184): user pid=31185 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201643101.550:3185): user pid=31846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201643101.550:3186): user pid=31846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201643101.551:3187): login pid=31846 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201643101.557:3188): user pid=31846 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201644061.360:3189): user pid=32173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201644061.360:3190): user pid=32173 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201644061.361:3191): login pid=32173 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201644061.369:3192): user pid=32173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201644061.374:3193): user pid=32173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201644061.374:3194): user pid=32173 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201644901.383:3195): user pid=32393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201644901.383:3196): user pid=32393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201644901.384:3197): login pid=32393 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201644901.391:3198): user pid=32393 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201645992.429:3199): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=32742 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201646701.311:3200): user pid=471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201646701.311:3201): user pid=471 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201646701.311:3202): login pid=471 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201646701.319:3203): user pid=471 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201647661.091:3204): user pid=797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201647661.092:3205): user pid=797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201647661.092:3206): login pid=797 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201647661.100:3207): user pid=797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201647661.105:3208): user pid=797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201647661.105:3209): user pid=797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201648501.114:3210): user pid=1029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201648501.114:3211): user pid=1029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201648501.115:3212): login pid=1029 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201648501.120:3213): user pid=1029 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201650301.983:3214): user pid=1642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201650301.984:3215): user pid=1642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201650301.984:3216): login pid=1642 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201650301.991:3217): user pid=1642 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1201650373.906:3218): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_ACCT msg=audit(1201651261.936:3219): user pid=1977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201651261.937:3220): user pid=1977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201651261.937:3221): login pid=1977 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201651261.944:3222): user pid=1977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201651261.951:3223): user pid=1977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201651261.951:3224): user pid=1977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201652101.960:3225): user pid=2224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201652101.960:3226): user pid=2224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201652101.960:3227): login pid=2224 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201652101.969:3228): user pid=2224 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201653901.205:3229): user pid=3118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201653901.205:3230): user pid=3118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201653901.205:3231): login pid=3118 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201653901.211:3232): user pid=3118 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_LOGIN msg=audit(1201653967.153:3233): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_LOGIN msg=audit(1201653967.158:3234): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="rick": exe="/usr/sbin/sshd" (hostname=?, addr=192.168.1.1, terminal=sshd res=failed)'
>type=USER_AUTH msg=audit(1201653970.210:3235): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201653970.350:3236): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1201653970.529:3237): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=LOGIN msg=audit(1201653970.531:3238): login pid=3187 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201653970.600:3239): user pid=3187 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_REFR msg=audit(1201653970.702:3240): user pid=3191 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1201653971.003:3241): user pid=3187 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_END msg=audit(1201653971.204:3242): user pid=3187 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/sshd" (hostname=router.rkkda.org, addr=192.168.1.1, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1201654861.230:3243): user pid=3532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201654861.231:3244): user pid=3532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201654861.231:3245): login pid=3532 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201654861.239:3246): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201654861.244:3247): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201654861.245:3248): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201655701.254:3249): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201655701.254:3250): user pid=3785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201655701.254:3251): login pid=3785 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201655701.263:3252): user pid=3785 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201656029.430:3253): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=3937 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201657501.381:3254): user pid=4363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201657501.382:3255): user pid=4363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201657501.382:3256): login pid=4363 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201657501.390:3257): user pid=4363 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201658461.341:3258): user pid=4673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201658461.341:3259): user pid=4673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201658461.342:3260): login pid=4673 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201658461.348:3261): user pid=4673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201658461.353:3262): user pid=4673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201658461.353:3263): user pid=4673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201659301.361:3264): user pid=4908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201659301.362:3265): user pid=4908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201659301.362:3266): login pid=4908 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201659301.369:3267): user pid=4908 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201661101.150:3268): user pid=5453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201661101.150:3269): user pid=5453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201661101.151:3270): login pid=5453 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201661101.159:3271): user pid=5453 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201662061.736:3272): user pid=5774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201662061.737:3273): user pid=5774 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201662061.738:3274): login pid=5774 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201662061.742:3275): user pid=5774 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201662061.748:3276): user pid=5774 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201662061.749:3277): user pid=5774 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201662771.847:3278): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201662771.847:3279): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201662771.886:3280): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201662901.758:3281): user pid=6025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201662901.759:3282): user pid=6025 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201662901.759:3283): login pid=6025 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201662901.773:3284): user pid=6025 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1201662931.262:3285): user pid=2138 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201662931.124:3286): policy loaded auid=500
>type=SYSCALL msg=audit(1201662931.124:3286): arch=40000003 syscall=4 success=yes exit=4036524 a0=4 a1=b7b0f000 a2=3d97ac a3=bfebf3b8 items=0 ppid=6024 pid=6077 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201662993.424:3287): user pid=6218 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201662995.211:3288): user pid=6222 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201663008.562:3289): user pid=6223 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201663010.378:3290): user pid=6228 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201663012.150:3291): user pid=6229 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201663025.949:3292): user pid=6230 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_END msg=audit(1201663042.647:3293): user pid=5966 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201664701.459:3294): user pid=6783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201664701.460:3295): user pid=6783 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201664701.461:3296): login pid=6783 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201664701.466:3297): user pid=6783 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201665661.534:3298): user pid=7155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201665661.534:3299): user pid=7155 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201665661.534:3300): login pid=7155 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201665661.541:3301): user pid=7155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201665661.547:3302): user pid=7155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201665661.548:3303): user pid=7155 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201666501.557:3304): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201666501.558:3305): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201666501.558:3306): login pid=7404 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201666501.564:3307): user pid=7404 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201667984.121:3308): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668050.003:3309): user pid=26778 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1201668082.219:3310): user pid=20390 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201668273.335:3311): avc:  denied  { getattr } for  pid=8300 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201668273.335:3311): arch=40000003 syscall=229 success=yes exit=33 a0=41c9bba8 a1=402a5723 a2=41c9bbc0 a3=ff items=0 ppid=8299 pid=8300 auid=500 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.336:3312): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.338:3313): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.343:3314): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.346:3315): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.349:3316): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.353:3317): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.356:3318): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.359:3319): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.362:3320): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201668273.365:3321): user pid=8300 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201668301.598:3322): user pid=8337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201668301.599:3323): user pid=8337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201668301.599:3324): login pid=8337 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201668301.606:3325): user pid=8337 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201668785.780:3326): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201668785.780:3327): user pid=3233 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1201668787.538:3328): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3147 comm="gdm-binary" sig=11
>type=DAEMON_END msg=audit(1201668800.339:8202): auditd normal halt, sending auid=4294967295 pid=9076 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201669370.029:8223): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=1902 res=success
>type=CONFIG_CHANGE msg=audit(1201669370.129:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201669370.129:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201669370.196:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201669370.196:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1201669435.677:8): avc:  denied  { getattr } for  pid=2854 comm="cupsd" name="prn" dev=dm-0 ino=23267091 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1201669435.677:8): arch=40000003 syscall=229 success=yes exit=33 a0=b82e1ba8 a1=32c723 a2=b82e1bc0 a3=ff items=0 ppid=2853 pid=2854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>type=LABEL_LEVEL_CHANGE msg=audit(1201669435.767:9): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=c3200 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669435.901:10): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=C3200_GDI uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669435.925:11): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp1020 uri=usb://HP/LaserJet%201020 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.059:12): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.124:13): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.180:14): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp2600c2 uri=hp:/net/HP_Color_LaserJet_2600n?ip=192.168.1.12 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.232:15): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P1006 uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.248:16): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530 uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.284:17): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c uri=socket://192.168.1.13:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1201669436.341:18): user pid=2854 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=mc2530c-prn uri=file:/home/rick/prn banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201669469.656:19): user pid=3132 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201669469.666:20): user pid=3132 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201669469.687:21): user pid=3132 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1201669469.692:22): login pid=3132 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1201669469.713:23): user pid=3132 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201669469.772:24): user pid=3132 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1201669469.773:25): user pid=3132 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=dual.rkkda.org, addr=127.0.0.1, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201670101.408:26): user pid=6014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201670101.409:27): user pid=6014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201670101.410:28): login pid=6014 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201670101.416:29): user pid=6014 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201671901.872:30): user pid=6642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201671901.872:31): user pid=6642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201671901.873:32): login pid=6642 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201671901.879:33): user pid=6642 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1201672779.998:34): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=6928 comm="f-spot" sig=6
>type=USER_ACCT msg=audit(1201672861.574:35): user pid=6955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201672861.575:36): user pid=6955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201672861.575:37): login pid=6955 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201672861.583:38): user pid=6955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201672861.619:39): user pid=6955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201672861.620:40): user pid=6955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201673701.629:41): user pid=7184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201673701.630:42): user pid=7184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201673701.630:43): login pid=7184 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201673701.638:44): user pid=7184 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201675501.111:45): user pid=7708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201675501.111:46): user pid=7708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201675501.112:47): login pid=7708 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201675501.119:48): user pid=7708 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201676461.370:49): user pid=8018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201676461.370:50): user pid=8018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201676461.370:51): login pid=8018 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201676461.375:52): user pid=8018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201676461.380:53): user pid=8018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201676461.381:54): user pid=8018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201677301.389:55): user pid=8247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201677301.389:56): user pid=8247 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201677301.389:57): login pid=8247 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201677301.394:58): user pid=8247 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201679101.624:59): user pid=8771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201679101.625:60): user pid=8771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201679101.625:61): login pid=8771 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201679101.630:62): user pid=8771 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201680061.671:63): user pid=9072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201680061.672:64): user pid=9072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201680061.672:65): login pid=9072 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201680061.679:66): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201680061.685:67): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201680061.685:68): user pid=9072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201680901.694:69): user pid=9301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201680901.694:70): user pid=9301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201680901.695:71): login pid=9301 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201680901.700:72): user pid=9301 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201681801.500:73): user pid=9587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201681801.500:74): user pid=9587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201681801.501:75): login pid=9587 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201681801.509:76): user pid=9587 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201682701.502:77): user pid=27502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201682701.502:78): user pid=27502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201682701.502:79): login pid=27502 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201682701.507:80): user pid=27502 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201683661.684:81): user pid=5863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201683661.685:82): user pid=5863 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201683661.685:83): login pid=5863 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201683661.690:84): user pid=5863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201683661.695:85): user pid=5863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201683661.696:86): user pid=5863 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201684501.703:87): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201684501.704:88): user pid=21739 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201684501.704:89): login pid=21739 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201684501.712:90): user pid=21739 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201686301.782:91): user pid=2278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201686301.783:92): user pid=2278 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201686301.783:93): login pid=2278 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201686301.790:94): user pid=2278 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201687261.663:95): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201687261.664:96): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201687261.664:97): login pid=2670 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201687261.672:98): user pid=2670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201687261.677:99): user pid=2670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201687261.677:100): user pid=2670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201687321.684:101): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201687321.685:102): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201687321.685:103): login pid=2698 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201687321.690:104): user pid=2698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201688101.689:105): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201688101.690:106): user pid=6462 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201688101.690:107): login pid=6462 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201688101.697:108): user pid=6462 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201688115.925:109): user pid=2698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201688115.926:110): user pid=2698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201689901.937:111): user pid=7500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201689901.938:112): user pid=7500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201689901.938:113): login pid=7500 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201689901.944:114): user pid=7500 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201690861.606:115): user pid=7808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201690861.607:116): user pid=7808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201690861.607:117): login pid=7808 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201690861.612:118): user pid=7808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201690861.617:119): user pid=7808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201690861.618:120): user pid=7808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201691701.627:121): user pid=8039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201691701.627:122): user pid=8039 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201691701.628:123): login pid=8039 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201691701.634:124): user pid=8039 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201692001.761:125): user pid=8166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201692001.762:126): user pid=8166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201692001.762:127): login pid=8166 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201692001.770:128): user pid=8166 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201692601.421:129): user pid=11962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201692601.421:130): user pid=11962 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201692601.421:131): login pid=11962 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201692601.429:132): user pid=11962 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201693501.598:133): user pid=12968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201693501.599:134): user pid=12968 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201693501.599:135): login pid=12968 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201693501.606:136): user pid=12968 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201694461.953:137): user pid=13270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201694461.954:138): user pid=13270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201694461.954:139): login pid=13270 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201694461.961:140): user pid=13270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201694461.966:141): user pid=13270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201694461.966:142): user pid=13270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201695301.975:143): user pid=13510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201695301.976:144): user pid=13510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201695301.976:145): login pid=13510 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201695301.984:146): user pid=13510 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201697101.511:147): user pid=14042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201697101.512:148): user pid=14042 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201697101.512:149): login pid=14042 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201697101.519:150): user pid=14042 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201698061.384:151): user pid=14344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201698061.385:152): user pid=14344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201698061.385:153): login pid=14344 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201698061.392:154): user pid=14344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201698061.397:155): user pid=14344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201698061.397:156): user pid=14344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201698901.406:157): user pid=14579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201698901.406:158): user pid=14578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201698901.407:159): user pid=14578 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201698901.407:160): login pid=14578 uid=0 old auid=4294967295 new auid=500
>type=CRED_ACQ msg=audit(1201698901.407:161): user pid=14579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201698901.408:162): login pid=14579 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201698901.414:163): user pid=14578 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1201698901.415:164): user pid=14579 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201700701.209:165): user pid=15184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201700701.210:166): user pid=15184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201700701.210:167): login pid=15184 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201700701.224:168): user pid=15184 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201701661.869:169): user pid=15494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201701661.870:170): user pid=15494 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201701661.870:171): login pid=15494 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201701661.876:172): user pid=15494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201701661.903:173): user pid=15494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201701661.903:174): user pid=15494 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201702501.913:175): user pid=15728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201702501.913:176): user pid=15728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201702501.913:177): login pid=15728 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201702501.922:178): user pid=15728 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201704301.856:179): user pid=16262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201704301.857:180): user pid=16262 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201704301.857:181): login pid=16262 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201704301.862:182): user pid=16262 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201705261.599:183): user pid=16561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201705261.599:184): user pid=16561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201705261.600:185): login pid=16561 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201705261.608:186): user pid=16561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201705261.612:187): user pid=16561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201705261.612:188): user pid=16561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201706101.621:189): user pid=16792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201706101.622:190): user pid=16792 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201706101.622:191): login pid=16792 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201706101.629:192): user pid=16792 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201707901.811:193): user pid=17340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201707901.811:194): user pid=17340 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201707901.811:195): login pid=17340 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1201707901.818:196): user pid=17340 uid=0 auid=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=rick exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'

Actions: View

Attachments on bug 430829: 293421 | 293439