Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 296518 Details for
Bug 430932
Domtrans from xdm_t to mono_t is required for beagled
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
The audit log
audit.log (text/plain), 1.44 MB, created by
Jochen Schmitt
on 2008-03-02 18:49:46 UTC
(
hide
)
Description:
The audit log
Filename:
MIME Type:
Creator:
Jochen Schmitt
Created:
2008-03-02 18:49:46 UTC
Size:
1.44 MB
patch
obsolete
>type=USER_ACCT msg=audit(1199732461.416:68): user pid=3093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199732461.417:69): user pid=3093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199732461.417:70): login pid=3093 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199732461.431:71): user pid=3093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199732461.455:72): user pid=3093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199732461.456:73): user pid=3093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199736061.639:74): user pid=28420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199736061.641:75): user pid=28420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199736061.641:76): login pid=28420 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199736061.664:77): user pid=28420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199736061.697:78): user pid=28420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199736061.698:79): user pid=28420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1199739661.879:80): user pid=18690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199739661.880:81): user pid=18690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199739661.880:82): login pid=18690 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199739661.917:83): user pid=18690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199739661.945:84): user pid=18690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199739661.946:85): user pid=18690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199742706.636:86): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199742706.651:87): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199742827.678:88): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199742827.681:89): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199742827.705:90): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199742827.705:91): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199742827.705:92): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CHAUTHTOK msg=audit(1199742855.827:93): user pid=30575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199742856.729:94): user pid=30595 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199742856.752:95): user pid=30600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199742857.583:96): user pid=30629 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1199742857.617:97): user pid=30633 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1199742857.652:98): user pid=30637 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199742857.692:99): user pid=30644 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199742857.692:100): user pid=30644 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199743056.145:101): user pid=30912 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199743056.151:102): user pid=30916 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199743058.503:103): user pid=30941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1199743074.401:104): user pid=31413 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199743262.018:105): user pid=8744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199743262.020:106): user pid=8744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199743262.020:107): login pid=8744 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199743262.069:108): user pid=8744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199743262.259:109): user pid=8744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199743262.260:110): user pid=8744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1199743297.991:111): auid=4294967295 uid=500 gid=101 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 pid=19139 comm="lt-gst" sig=11 >type=USER_AUTH msg=audit(1199744228.257:112): user pid=20501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199744228.257:113): user pid=20501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199744228.257:114): user pid=20501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199744232.655:115): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199744232.658:116): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199744232.687:117): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199744232.687:118): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199744235.571:119): user pid=20853 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199744235.571:120): user pid=20853 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199744236.185:121): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199744236.186:122): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199744236.187:123): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199744236.187:124): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199744236.187:125): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199744236.188:126): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1199744236.188:127): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1199744236.188:128): avc: denied { unlink } for pid=3009 comm="ssh-agent" name="agent.3008" dev=dm-0 ino=300660 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=USER_END msg=audit(1199744236.190:129): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=SYSCALL msg=audit(1199744236.188:128): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff8563dbb0 a2=7fff8563da80 a3=0 items=0 ppid=1 pid=3009 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1199744248.716:9707): auditd normal halt, sending auid=4294967295 pid=21367 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2142 >type=DAEMON_START msg=audit(1199804801.148:7599): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2142 res=success, auditd pid=2142 >type=CONFIG_CHANGE msg=audit(1199804801.248:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199804801.248:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199804801.284:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199804801.284:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199804805.676:8): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199804805.676:9): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199804807.407:10): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199804807.408:11): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199804855.126:12): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1199804855.126:13): avc: denied { write } for pid=2898 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199804855.126:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=1ee4e a3=4000 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199804855.126:14): avc: denied { lock } for pid=2898 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199804855.126:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffec798b60 a3=8 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199804855.126:15): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199804859.789:16): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199804859.804:17): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199804859.856:18): avc: denied { create } for pid=3012 comm="ssh-agent" name="agent.3012" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199804859.856:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff3abb5b20 a2=6e a3=0 items=0 ppid=2898 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199804859.858:19): avc: denied { write } for pid=2898 comm="login" name="agent.3012" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199804859.858:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffec796b20 a2=6e a3=0 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199804859.858:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199804859.866:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199804859.878:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199804870.909:23): user pid=3135 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199804870.911:24): user pid=3135 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199804888.653:25): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199804888.655:26): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199804888.703:27): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199804888.703:28): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199804938.177:29): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199804938.178:30): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199807347.108:31): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199807347.110:32): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199807347.112:33): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199807347.112:34): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199807347.112:35): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199807511.053:36): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199807511.056:37): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199807511.063:38): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199807511.063:39): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199807532.346:40): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199807532.347:41): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199807660.398:42): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199807660.399:43): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199808061.807:44): user pid=8663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199808061.808:45): user pid=8663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199808061.808:46): login pid=8663 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199808061.823:47): user pid=8663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199808061.952:48): user pid=8663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199808061.953:49): user pid=8663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199808167.924:50): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199808167.928:51): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199808167.929:52): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199808167.929:53): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199808167.929:54): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199810348.945:55): user pid=19020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199810348.945:56): user pid=19020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199810348.945:57): user pid=19020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199810354.946:58): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199810354.948:59): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199810354.953:60): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199810354.954:61): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199810356.870:62): user pid=19372 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199810356.870:63): user pid=19372 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199810356.932:64): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199810356.933:65): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199810356.934:66): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199810356.934:67): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199810356.935:68): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199810356.938:69): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1199810356.948:70): avc: denied { unlink } for pid=3013 comm="ssh-agent" name="agent.3012" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199810356.948:70): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff3abb5330 a2=7fff3abb5200 a3=0 items=0 ppid=1 pid=3013 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1199810366.096:7600): auditd normal halt, sending auid=4294967295 pid=19868 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2142 >type=DAEMON_START msg=audit(1199819731.870:3153): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2141 res=success, auditd pid=2141 >type=CONFIG_CHANGE msg=audit(1199819731.969:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199819731.969:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199819731.997:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199819731.997:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199819736.397:8): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199819736.397:9): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199819738.137:10): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199819738.138:11): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199819753.854:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199819753.872:13): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199819753.924:14): avc: denied { create } for pid=3006 comm="ssh-agent" name="agent.3006" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199819753.924:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffcd5f6550 a2=6e a3=0 items=0 ppid=2896 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199819753.925:15): avc: denied { write } for pid=2896 comm="login" name="agent.3006" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199819753.925:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffa5e741f0 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1199819753.926:16): login pid=2896 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1199819753.936:17): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199819753.940:18): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199819753.950:19): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199819753.950:20): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199819871.342:21): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199819871.343:22): avc: denied { unlink } for pid=3007 comm="ssh-agent" name="agent.3006" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199819871.343:22): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffcd5f5d60 a2=7fffcd5f5c30 a3=0 items=0 ppid=1 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1199819871.344:23): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199819878.860:24): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1199819878.860:25): avc: denied { write } for pid=3534 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199819878.860:25): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=d21ca a3=4000 items=0 ppid=1 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199819878.860:26): avc: denied { lock } for pid=3534 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199819878.860:26): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fff9f0a5460 a3=8 items=0 ppid=1 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199819878.867:27): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=s45604kr: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199819883.154:28): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199819883.156:29): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199819883.161:30): avc: denied { create } for pid=3551 comm="ssh-agent" name="agent.3551" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199819883.161:30): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fffa9000cf0 a2=6e a3=0 items=0 ppid=3534 pid=3551 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199819883.162:31): avc: denied { write } for pid=3534 comm="login" name="agent.3551" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199819883.162:31): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff9f0a3420 a2=6e a3=0 items=0 ppid=1 pid=3534 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199819883.163:32): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199819883.163:33): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199819883.171:34): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199820623.721:35): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199820623.723:36): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199820623.739:37): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199820623.739:38): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199820664.547:39): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199820664.548:40): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199820669.400:41): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199820669.402:42): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199820669.415:43): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199820669.415:44): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199820686.809:45): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199820686.810:46): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199820697.721:47): user pid=5565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199820702.742:48): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199820702.744:49): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199820702.755:50): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199820702.755:51): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199820915.986:52): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199820915.987:53): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199821332.820:54): user pid=7005 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199821332.820:55): user pid=7005 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199821332.820:56): user pid=7005 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199821337.729:57): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199821337.731:58): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199821337.738:59): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199821337.738:60): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199821340.933:61): user pid=7357 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199821340.934:62): user pid=7357 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199821340.983:63): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199821340.983:64): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199821340.984:65): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199821340.984:66): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199821340.984:67): avc: denied { unlink } for pid=3552 comm="ssh-agent" name="agent.3551" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199821340.984:67): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffa9000500 a2=7fffa90003d0 a3=0 items=0 ppid=1 pid=3552 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1199821350.349:3154): auditd normal halt, sending auid=4294967295 pid=7860 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2141 >type=DAEMON_START msg=audit(1199822328.322:3288): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2146 res=success, auditd pid=2146 >type=CONFIG_CHANGE msg=audit(1199822328.422:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199822328.422:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199822328.458:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199822328.458:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199822332.899:8): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199822332.899:9): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199822334.573:10): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199822334.573:11): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199822351.310:12): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199822351.327:13): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199822351.380:14): avc: denied { create } for pid=3015 comm="ssh-agent" name="agent.3015" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199822351.380:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff776cab50 a2=6e a3=0 items=0 ppid=2902 pid=3015 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199822351.381:15): avc: denied { write } for pid=2902 comm="login" name="agent.3015" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199822351.381:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff49759ae0 a2=6e a3=0 items=0 ppid=1 pid=2902 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199822351.381:16): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199822351.390:17): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199822351.402:18): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199822461.923:19): user pid=3236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199822461.924:20): user pid=3236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199822461.925:21): login pid=3236 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199822461.950:22): user pid=3236 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199822462.110:23): user pid=3236 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199822462.111:24): user pid=3236 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199822492.920:25): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199822492.923:26): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199822492.949:27): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199822492.949:28): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199822503.131:29): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199822503.132:30): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199822942.873:31): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199822942.874:32): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199822942.874:33): avc: denied { unlink } for pid=3016 comm="ssh-agent" name="agent.3015" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199822942.874:33): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff776ca360 a2=7fff776ca230 a3=0 items=0 ppid=1 pid=3016 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1199822950.372:34): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199822950.375:35): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199822950.381:36): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199822950.382:37): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199822950.382:38): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199823821.952:39): user pid=6662 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199823821.952:40): user pid=6662 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199823821.952:41): user pid=6662 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199823830.250:42): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199823830.252:43): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199823830.258:44): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199823830.259:45): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199823908.423:46): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199823908.424:47): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199823908.424:48): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199823908.424:49): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199823908.431:50): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199823908.431:51): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199823908.491:52): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199823908.492:53): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199823908.496:54): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199823908.497:55): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199823908.497:56): avc: denied { unlink } for pid=5008 comm="ssh-agent" name="agent.5007" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199823908.497:56): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffde3bb8c0 a2=7fffde3bb790 a3=0 items=0 ppid=1 pid=5008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1199823917.735:3289): auditd normal halt, sending auid=4294967295 pid=7573 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2146 >type=DAEMON_START msg=audit(1199893615.857:7470): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2145 res=success, auditd pid=2145 >type=CONFIG_CHANGE msg=audit(1199893615.956:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199893615.956:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199893615.992:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199893615.992:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199893620.450:8): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199893620.450:9): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199893622.746:10): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199893622.746:11): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199893672.900:12): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1199893672.900:13): avc: denied { write } for pid=2900 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199893672.900:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=dbf4c a3=4000 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199893672.900:14): avc: denied { lock } for pid=2900 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199893672.900:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffbc6fff90 a3=8 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199893672.911:15): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199893677.218:16): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199893677.232:17): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199893677.284:18): avc: denied { create } for pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199893677.284:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7ffff2b5c6b0 a2=6e a3=0 items=0 ppid=2900 pid=3010 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199893677.286:19): avc: denied { write } for pid=2900 comm="login" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199893677.286:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffbc6fdf50 a2=6e a3=0 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199893677.286:20): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199893677.294:21): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199893677.307:22): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199893685.608:23): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199893685.610:24): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199893685.611:25): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199893685.612:26): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199893685.612:27): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199893685.613:28): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199893701.195:29): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199893701.196:30): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199893701.196:31): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199893701.196:32): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199893712.113:33): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199893712.114:34): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199893712.114:35): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199893712.114:36): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199893721.082:37): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199893721.084:38): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199893721.133:39): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199893721.133:40): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199893768.503:41): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199893768.504:42): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199893790.470:43): user pid=3678 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199893790.470:44): user pid=3678 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199893790.470:45): user pid=3678 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=CRED_ACQ msg=audit(1199893794.762:46): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199893794.763:47): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199893794.763:48): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199893794.763:49): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199893794.769:50): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199893794.770:51): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199893794.836:52): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199893794.837:53): avc: denied { unlink } for pid=3011 comm="ssh-agent" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199893794.837:53): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff2b5bec0 a2=7ffff2b5bd90 a3=0 items=0 ppid=1 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1199893794.837:54): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1199893803.064:7471): auditd normal halt, sending auid=4294967295 pid=4180 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2145 >type=DAEMON_START msg=audit(1199896716.687:2091): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2145 res=success, auditd pid=2145 >type=CONFIG_CHANGE msg=audit(1199896716.787:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199896716.787:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199896716.823:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199896716.823:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199896721.148:8): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199896721.148:9): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199896722.763:10): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199896722.764:11): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199896741.598:12): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199896741.616:13): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199896741.668:14): avc: denied { create } for pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199896741.668:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff4f3b85a0 a2=6e a3=0 items=0 ppid=2900 pid=3010 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199896741.670:15): avc: denied { write } for pid=2900 comm="login" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199896741.670:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff314587e0 a2=6e a3=0 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199896741.670:16): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199896741.678:17): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199896741.691:18): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199896804.507:19): user pid=3199 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199896807.919:20): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199896807.922:21): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199896807.965:22): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199896807.965:23): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199896830.434:24): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199896830.435:25): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199896834.419:26): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199896834.422:27): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199896834.435:28): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199896834.435:29): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199897035.559:30): avc: denied { associate } for pid=4116 comm="lynx" name="L4116-2433TMP.bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199897035.559:30): arch=40000003 syscall=5 success=yes exit=4 a0=ffdf3798 a1=c1 a2=180 a3=ffdf3798 items=0 ppid=4062 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="lynx" exe="/usr/bin/lynx" subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1199897951.162:31): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199897951.165:32): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199897951.166:33): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199897951.167:34): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199897951.167:35): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199898062.032:36): user pid=5611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199898062.033:37): user pid=5611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199898062.033:38): login pid=5611 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199898062.042:39): user pid=5611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199898062.170:40): user pid=5611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199898062.171:41): user pid=5611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1199898206.224:42): avc: denied { associate } for pid=4737 comm="lynx" name="L4737-5981TMP.bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199898206.224:42): arch=40000003 syscall=5 success=yes exit=4 a0=ff8ac758 a1=c1 a2=180 a3=ff8ac758 items=0 ppid=4062 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="lynx" exe="/usr/bin/lynx" subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1199898974.841:43): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199898974.844:44): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199898974.844:45): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199898974.846:46): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199898974.846:47): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1199898974.846:48): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199899023.068:49): user pid=6593 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199899023.068:50): user pid=6593 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199899023.068:51): user pid=6593 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=CRED_ACQ msg=audit(1199899025.999:52): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199899026.000:53): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199899026.000:54): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1199899026.000:55): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199899026.006:56): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199899026.007:57): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199899026.059:58): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199899026.060:59): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199899026.067:60): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1199899026.113:61): avc: denied { unlink } for pid=3011 comm="ssh-agent" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199899026.113:61): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff4f3b7db0 a2=7fff4f3b7c80 a3=0 items=0 ppid=1 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1199899026.114:62): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199899026.116:63): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199899026.117:64): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1199899035.221:2092): auditd normal halt, sending auid=4294967295 pid=7096 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2145 >type=DAEMON_START msg=audit(1199903103.276:7814): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2144 res=success, auditd pid=2144 >type=CONFIG_CHANGE msg=audit(1199903103.375:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199903103.375:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199903103.403:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199903103.403:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199903107.836:8): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199903107.836:9): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199903109.833:10): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199903109.834:11): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199903128.180:12): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1199903128.180:13): avc: denied { write } for pid=2899 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199903128.180:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=2c3d2 a3=4000 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199903128.180:14): avc: denied { lock } for pid=2899 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199903128.180:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffd89bed80 a3=8 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199903128.188:15): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199903132.149:16): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199903132.169:17): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199903132.221:18): avc: denied { create } for pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199903132.221:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fffaecd4f00 a2=6e a3=0 items=0 ppid=2899 pid=3010 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199903132.222:19): avc: denied { write } for pid=2899 comm="login" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199903132.222:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffd89bcd40 a2=6e a3=0 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199903132.223:20): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199903132.231:21): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199903132.244:22): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199903218.461:23): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199903218.464:24): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199903218.512:25): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199903218.512:26): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199903249.376:27): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=AVC msg=audit(1199903249.376:28): avc: denied { write } for pid=2900 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199903249.376:28): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=5c10d a3=4000 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty2 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199903249.376:29): avc: denied { lock } for pid=2900 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199903249.376:29): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffcf786b40 a3=8 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty2 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199903249.376:30): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199903266.370:31): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1199903266.370:32): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199903270.276:33): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199903270.279:34): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199903270.280:35): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199903270.280:36): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199903270.280:37): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199904731.878:38): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199904731.879:39): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199905261.894:40): user pid=11488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199905261.896:41): user pid=11488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199905261.896:42): login pid=11488 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199905261.911:43): user pid=11488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199905262.039:44): user pid=11488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199905262.040:45): user pid=11488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199907062.150:46): user pid=13236 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199907062.150:47): user pid=13236 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199907062.150:48): user pid=13236 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199907070.614:49): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1199907074.603:50): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199907074.605:51): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199907074.606:52): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199907074.607:53): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199907074.607:54): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1199907074.607:55): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199907074.614:56): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199907074.614:57): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199907074.786:58): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199907074.787:59): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199907074.787:60): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199907074.788:61): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199907074.789:62): avc: denied { unlink } for pid=3011 comm="ssh-agent" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199907074.789:62): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffaecd4710 a2=7fffaecd45e0 a3=0 items=0 ppid=1 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1199907083.975:7815): auditd normal halt, sending auid=4294967295 pid=13743 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2144 >type=DAEMON_START msg=audit(1199977768.002:7128): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2139 res=success, auditd pid=2139 >type=CONFIG_CHANGE msg=audit(1199977768.102:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199977768.102:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199977768.138:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199977768.138:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199977772.629:8): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199977772.629:9): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199977774.485:10): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199977774.485:11): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199977791.910:12): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199977791.928:13): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199977791.980:14): avc: denied { create } for pid=3004 comm="ssh-agent" name="agent.3004" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199977791.980:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff30db0900 a2=6e a3=0 items=0 ppid=2894 pid=3004 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199977791.981:15): avc: denied { write } for pid=2894 comm="login" name="agent.3004" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199977791.981:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff04d92110 a2=6e a3=0 items=0 ppid=1 pid=2894 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199977791.982:16): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199977791.989:17): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199977792.003:18): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199977803.145:19): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199977803.148:20): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199977803.148:21): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199977803.150:22): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199977803.150:23): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199977803.150:24): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199977914.625:25): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199977914.627:26): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199977914.676:27): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199977914.676:28): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199978129.228:29): avc: denied { read write } for pid=4252 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=AVC msg=audit(1199978129.228:29): avc: denied { write } for pid=4252 comm="useradd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1199978129.228:29): arch=40000003 syscall=11 success=yes exit=0 a0=8103b58 a1=8103da8 a2=8102468 a3=0 items=0 ppid=4251 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978129.316:30): avc: denied { ioctl } for pid=4252 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1199978129.316:30): arch=40000003 syscall=54 success=yes exit=0 a0=1 a1=5401 a2=ff90931c a3=ff90943c items=0 ppid=4251 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1199978129.316:31): user pid=4252 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1199978146.963:32): avc: denied { read write } for pid=4283 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=AVC msg=audit(1199978146.963:32): avc: denied { write } for pid=4283 comm="useradd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1199978146.963:32): arch=40000003 syscall=11 success=yes exit=0 a0=81039e8 a1=8102d48 a2=8102468 a3=0 items=0 ppid=4282 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1199978146.965:33): user pid=4283 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1199978146.994:34): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1199978147.001:35): avc: denied { write } for pid=4285 comm="nscd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:nscd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1199978147.001:35): arch=40000003 syscall=11 success=yes exit=0 a0=8056aa8 a1=ffafb7b4 a2=ffafb7c8 a3=ffafda9e items=0 ppid=4284 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="nscd" exe="/usr/sbin/nscd" subj=system_u:system_r:nscd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978464.043:36): avc: denied { write } for pid=9168 comm="semodule" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1199978464.043:36): arch=40000003 syscall=11 success=yes exit=0 a0=8104050 a1=8102670 a2=8102468 a3=0 items=0 ppid=9167 pid=9168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978464.103:37): avc: denied { getattr } for pid=9168 comm="semodule" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199978464.103:37): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8a871 a1=54 a2=ff9a393c a3=f7f8a871 items=0 ppid=9167 pid=9168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978473.646:38): avc: denied { read write } for pid=9177 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1199978473.646:38): arch=40000003 syscall=11 success=yes exit=0 a0=f80009e8 a1=fb7036f0 a2=0 a3=0 items=0 ppid=9172 pid=9177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978474.906:39): avc: denied { write } for pid=9177 comm="load_policy" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1199978474.906:39): arch=40000003 syscall=4 success=yes exit=25 a0=2 a1=ff8b255c a2=19 a3=19 items=0 ppid=9172 pid=9177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978476.750:40): avc: denied { read } for pid=9184 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1199978476.750:40): arch=40000003 syscall=11 success=yes exit=0 a0=f80009e8 a1=fb7036f0 a2=0 a3=0 items=0 ppid=9172 pid=9184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978480.281:41): avc: denied { write } for pid=9217 comm="restorecon" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1199978480.281:41): arch=40000003 syscall=11 success=yes exit=0 a0=8105f98 a1=8106b90 a2=81048c8 a3=0 items=0 ppid=9167 pid=9217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978510.524:42): avc: denied { search } for pid=9498 comm="setsebool" name="home" dev=sdb2 ino=622593 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir >type=SYSCALL msg=audit(1199978510.524:42): arch=40000003 syscall=5 success=no exit=-2 a0=ffd584d0 a1=0 a2=0 a3=ffd584d0 items=0 ppid=9497 pid=9498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978510.525:43): avc: denied { getattr } for pid=9498 comm="setsebool" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199978510.525:43): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8b871 a1=54 a2=ffd57d9c a3=f7f8b871 items=0 ppid=9497 pid=9498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978510.658:44): avc: denied { getattr } for pid=9499 comm="semanage" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199978510.658:44): arch=40000003 syscall=268 success=yes exit=0 a0=f79dd871 a1=54 a2=ffa0ab1c a3=f79dd871 items=0 ppid=9497 pid=9499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semanage" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978512.393:45): avc: denied { write } for pid=9501 comm="semanage" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1199978512.393:45): arch=40000003 syscall=11 success=yes exit=0 a0=81044e0 a1=8102d48 a2=81027e0 a3=0 items=0 ppid=9497 pid=9501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semanage" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1199978541.357:46): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199978541.358:47): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199978541.358:48): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1199978541.359:49): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/sbin/reboot" (terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199978541.443:50): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199978541.444:51): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199978541.444:52): avc: denied { unlink } for pid=3005 comm="ssh-agent" name="agent.3004" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199978541.444:52): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff30db0110 a2=7fff30daffe0 a3=0 items=0 ppid=1 pid=3005 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1199978541.508:53): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199978541.510:54): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1199978549.755:7129): auditd normal halt, sending auid=4294967295 pid=10140 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2139 >type=DAEMON_START msg=audit(1199978681.275:2598): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2149 res=success, auditd pid=2149 >type=CONFIG_CHANGE msg=audit(1199978681.374:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199978681.374:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199978681.410:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199978681.410:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199978685.420:8): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199978685.420:9): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199978687.343:10): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199978687.343:11): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199978706.088:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1199978706.088:13): avc: denied { write } for pid=2896 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199978706.088:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=15bcb a3=4000 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978706.088:14): avc: denied { lock } for pid=2896 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file >type=SYSCALL msg=audit(1199978706.088:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7ffffbf7e340 a3=8 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_LOGIN msg=audit(1199978706.095:15): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199978709.877:16): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199978710.010:17): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199978710.062:18): avc: denied { create } for pid=3007 comm="ssh-agent" name="agent.3007" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199978710.062:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff4d004300 a2=6e a3=0 items=0 ppid=2896 pid=3007 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199978710.064:19): avc: denied { write } for pid=2896 comm="login" name="agent.3007" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199978710.064:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7ffffbf7c300 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199978710.064:20): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199978710.081:21): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199978710.093:22): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199978718.948:23): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199978718.950:24): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199978718.999:25): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199978718.999:26): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199978748.501:27): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199978748.501:28): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199978748.576:29): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199978748.576:30): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199978805.008:31): user pid=3410 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=CRED_DISP msg=audit(1199978806.386:32): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199978806.386:33): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199978898.722:34): avc: denied { associate } for pid=3436 comm="lynx" name="L3436-7173TMP.bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1199978898.722:34): arch=40000003 syscall=5 success=yes exit=4 a0=ffca5078 a1=c1 a2=180 a3=ffca5078 items=0 ppid=3262 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="lynx" exe="/usr/bin/lynx" subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1199979498.516:35): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199979498.518:36): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199979504.190:37): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199979504.192:38): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199979504.205:39): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199979504.205:40): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199979793.235:41): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199979793.235:42): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199979793.290:43): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199979793.290:44): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199979881.059:45): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199979881.061:46): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199979881.062:47): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199979881.062:48): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199979967.390:49): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199979967.390:50): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199980248.366:51): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199980248.368:52): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199980248.369:53): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199980248.369:54): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199980294.394:55): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199980294.394:56): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199980333.085:57): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199980333.087:58): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199980333.088:59): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199980333.088:60): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199980351.705:61): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199980351.705:62): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199980371.066:63): user pid=4953 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199980373.981:64): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199980373.983:65): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199980373.984:66): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199980373.984:67): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199980392.987:68): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199980392.988:69): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199980519.753:70): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199980519.755:71): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199980519.756:72): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199980519.756:73): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199980519.757:74): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199980861.571:75): user pid=24706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199980861.573:76): user pid=24706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199980861.573:77): login pid=24706 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199980861.579:78): user pid=24706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199980861.820:79): user pid=24706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199980861.821:80): user pid=24706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199981435.787:81): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199981435.790:82): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199981435.791:83): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199981435.791:84): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199981487.476:85): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199981487.476:86): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199981840.414:87): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199981840.417:88): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199981840.417:89): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199981840.418:90): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199981877.983:91): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199981877.984:92): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199982456.494:93): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1199982456.497:94): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1199982456.498:95): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1199982456.498:96): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1199982456.498:97): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1199984273.460:98): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1199984273.460:99): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1199984280.285:100): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199984280.285:101): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1199984280.309:102): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1199984280.309:103): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1199984461.835:104): user pid=28940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199984461.836:105): user pid=28940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199984461.836:106): login pid=28940 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199984461.850:107): user pid=28940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199984461.873:108): user pid=28940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199984461.927:109): user pid=28940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199984526.098:110): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1199984526.098:111): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1199984596.572:112): avc: denied { getattr } for pid=29123 comm="updatedb" path="/mnt/feddev/root" dev=sdb2 ino=573441 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984596.572:112): arch=c000003e syscall=6 success=yes exit=0 a0=6128d9 a1=7fff1bdc2e80 a2=7fff1bdc2e80 a3=0 items=0 ppid=29117 pid=29123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null) >type=AVC msg=audit(1199984596.572:113): avc: denied { search } for pid=29123 comm="updatedb" name="root" dev=sdb2 ino=573441 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984596.572:113): arch=c000003e syscall=80 success=yes exit=0 a0=6128d9 a1=6128d9 a2=7fff1bdc2e80 a3=0 items=0 ppid=29117 pid=29123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null) >type=AVC msg=audit(1199984596.572:114): avc: denied { read } for pid=29123 comm="updatedb" name="root" dev=sdb2 ino=573441 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984596.572:114): arch=c000003e syscall=2 success=yes exit=10 a0=406a69 a1=50000 a2=8c001 a3=0 items=0 ppid=29117 pid=29123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null) >type=AVC msg=audit(1199984732.578:115): avc: denied { getattr } for pid=29292 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984732.578:115): arch=c000003e syscall=6 success=yes exit=0 a0=60443b a1=7fffa7bd7530 a2=7fffa7bd7530 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1199984732.578:116): avc: denied { search } for pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984732.578:116): arch=c000003e syscall=80 success=yes exit=0 a0=60443b a1=7fffa7bd7230 a2=0 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1199984732.578:117): avc: denied { read } for pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984732.578:117): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1199984732.578:118): avc: denied { getattr } for pid=29292 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199984732.578:118): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffa7bd73a0 a2=7fffa7bd73a0 a3=3688d529f0 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1199984732.578:119): avc: denied { setattr } for pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984732.578:119): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffa7bd7430 a2=3688d529d8 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1199984732.578:120): avc: denied { rmdir } for pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1199984732.578:120): arch=c000003e syscall=84 success=no exit=-39 a0=60443b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1199984732.638:121): avc: denied { getattr } for pid=29292 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1199984732.638:121): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffa7bd73a0 a2=7fffa7bd73a0 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=CRED_DISP msg=audit(1199986317.858:122): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199986317.859:123): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199988062.004:124): user pid=32338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199988062.005:125): user pid=32338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199988062.005:126): login pid=32338 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199988062.030:127): user pid=32338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199988062.095:128): user pid=32338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199988062.096:129): user pid=32338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1199989892.169:130): user pid=1550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199989898.699:131): user pid=1560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1199989903.431:132): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199989903.431:133): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199989903.462:134): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199989903.462:135): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199990636.257:136): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199990636.257:137): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199990782.466:138): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199990782.467:139): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199990782.472:140): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199990782.472:141): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199991661.108:142): user pid=20580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1199991661.109:143): user pid=20580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1199991661.110:144): login pid=20580 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1199991661.122:145): user pid=20580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199991661.145:146): user pid=20580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1199991661.146:147): user pid=20580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1199992990.819:148): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199992990.839:149): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199992995.217:150): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199992995.221:151): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199992995.237:152): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199992995.237:153): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1199992995.237:154): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199993001.983:155): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199993001.986:156): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1199993001.987:157): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1199993001.988:158): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1199993001.988:159): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1199993001.988:160): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1199993002.120:161): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1199993002.120:162): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199993002.248:163): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199993002.249:164): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199993002.249:165): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1199993002.250:166): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1199993002.256:167): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1199993002.257:168): avc: denied { unlink } for pid=3008 comm="ssh-agent" name="agent.3007" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199993002.257:168): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff4d003b10 a2=7fff4d0039e0 a3=0 items=0 ppid=1 pid=3008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1199993002.257:169): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1199993002.345:170): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199993002.345:171): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199993002.744:172): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199993002.745:173): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1199993012.624:2599): auditd normal halt, sending auid=4294967295 pid=26588 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2149 >type=DAEMON_START msg=audit(1199998851.430:2899): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2146 res=success, auditd pid=2146 >type=CONFIG_CHANGE msg=audit(1199998851.530:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199998851.530:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1199998851.558:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1199998851.558:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1199998856.058:8): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1199998856.058:9): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1199998857.839:10): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1199998857.839:11): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1199998874.435:12): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199998874.453:13): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1199998874.505:14): avc: denied { create } for pid=3012 comm="ssh-agent" name="agent.3012" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199998874.505:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff05dc2f0 a2=6e a3=0 items=0 ppid=2902 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1199998874.506:15): avc: denied { write } for pid=2902 comm="login" name="agent.3012" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1199998874.506:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff2d6daa60 a2=6e a3=0 items=0 ppid=1 pid=2902 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1199998874.506:16): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199998874.514:17): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1199998874.527:18): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199998890.365:19): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199998890.367:20): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199998890.415:21): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199998890.415:22): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1199998936.365:23): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1199998936.366:24): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199998940.453:25): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199998940.456:26): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199998940.467:27): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199998940.467:28): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199998957.428:29): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199998957.428:30): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199998957.492:31): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199998957.493:32): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199999023.375:33): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1199999023.376:34): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1199999023.376:35): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1199999028.451:36): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1199999028.453:37): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1199999028.454:38): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1199999028.454:39): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1199999032.280:40): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1199999032.280:41): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1199999032.281:42): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_START msg=audit(1200003225.153:1042): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2178 res=success, auditd pid=2178 >type=CONFIG_CHANGE msg=audit(1200003225.252:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200003225.252:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200003225.288:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200003225.288:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200003229.481:8): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1200003229.481:9): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1200003231.317:10): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1200003231.317:11): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1200003259.484:12): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1200003259.502:13): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1200003259.572:14): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1200003259.636:15): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1200003288.583:16): avc: denied { execheap } for pid=3452 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1200003288.583:16): arch=c000003e syscall=10 success=yes exit=0 a0=f04000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3452 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200003989.680:17): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1200003989.680:18): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1200003999.354:1043): auditd normal halt, sending auid=4294967295 pid=5100 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2178 >type=DAEMON_START msg=audit(1200323353.500:78): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2143 res=success, auditd pid=2143 >type=CONFIG_CHANGE msg=audit(1200323353.599:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200323353.599:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200323353.627:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200323353.627:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200323358.823:8): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200323358.823:9): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200323360.480:10): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200323360.481:11): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200323377.963:12): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200323377.981:13): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200323378.033:14): avc: denied { create } for pid=3011 comm="ssh-agent" name="agent.3011" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200323378.033:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff429b1c60 a2=6e a3=0 items=0 ppid=2899 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200323378.035:15): avc: denied { write } for pid=2899 comm="login" name="agent.3011" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200323378.035:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff7d04d3d0 a2=6e a3=0 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200323378.035:16): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200323378.043:17): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200323378.056:18): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200323390.059:19): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200323390.062:20): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200323390.063:21): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200323390.064:22): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200323390.064:23): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200323390.065:24): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=AVC msg=audit(1200323719.243:25): avc: denied { read write } for pid=3425 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323719.243:25): arch=c000003e syscall=59 success=yes exit=0 a0=6c84b0 a1=6c6280 a2=6c5fd0 a3=0 items=0 ppid=3424 pid=3425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200323788.225:26): avc: denied { read write } for pid=3501 comm="userdel" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323788.225:26): arch=c000003e syscall=59 success=yes exit=0 a0=6c7c80 a1=6c7be0 a2=6c5fd0 a3=0 items=0 ppid=3500 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200323788.262:27): avc: denied { ioctl } for pid=3501 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323788.262:27): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff4559a7d0 a3=3688d529f0 items=0 ppid=3500 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200323788.263:28): avc: denied { getattr } for pid=3501 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323788.263:28): arch=c000003e syscall=6 success=yes exit=0 a0=7fff4559ee70 a1=7fff4559a9e0 a2=7fff4559a9e0 a3=3688d529f0 items=0 ppid=3500 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200323788.263:29): user pid=3501 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1200323788.277:30): user pid=3501 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1200323789.827:31): user pid=3504 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1200323789.952:32): avc: denied { ioctl } for pid=3507 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323789.952:32): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff38560a80 a3=2aaaaf54d3f2 items=0 ppid=3500 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200323789.952:33): avc: denied { getattr } for pid=3507 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323789.952:33): arch=c000003e syscall=6 success=yes exit=0 a0=7fff38565120 a1=7fff38560c90 a2=7fff38560c90 a3=2aaaaf54d3f2 items=0 ppid=3500 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200323789.952:34): user pid=3507 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_CHAUTHTOK msg=audit(1200323789.957:35): user pid=3508 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200323789.966:36): avc: denied { read write } for pid=3512 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323789.966:36): arch=c000003e syscall=59 success=yes exit=0 a0=6c8e20 a1=6c7ff0 a2=6c5fd0 a3=0 items=0 ppid=3500 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200323790.013:37): user pid=3512 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200323874.670:38): avc: denied { read write } for pid=3598 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323874.670:38): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccf90 a1=2aaab288ca10 a2=0 a3=0 items=0 ppid=3580 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200323875.206:39): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200323874.824:40): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200323874.824:40): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3580 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200323909.180:41): avc: denied { read write } for pid=3715 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323909.180:41): arch=c000003e syscall=59 success=yes exit=0 a0=6c84b0 a1=6c6280 a2=6c5fd0 a3=0 items=0 ppid=3714 pid=3715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200323910.215:42): user pid=3719 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=postgres exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1200323910.215:43): avc: denied { read write } for pid=3720 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323910.215:43): arch=c000003e syscall=59 success=yes exit=0 a0=6c8d20 a1=6c7c10 a2=6c5fd0 a3=0 items=0 ppid=3718 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200323910.218:44): user pid=3720 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=postgres exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1200323944.573:45): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200323944.576:46): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200323944.577:47): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200323944.577:48): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200323944.577:49): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200323971.670:50): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200323971.673:51): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200323971.674:52): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200323971.675:53): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200323971.675:54): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200323971.675:55): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/mount" (terminal=tty2 res=success)' >type=USER_ROLE_CHANGE msg=audit(1200323985.591:56): user pid=3969 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1200323994.717:57): avc: denied { read write } for pid=3977 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200323994.717:57): arch=c000003e syscall=59 success=yes exit=0 a0=10dae70 a1=1783ee0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3970 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200323995.224:58): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200323994.848:59): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200323994.848:59): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3970 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200323995.657:60): user pid=3970 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200324004.055:61): avc: denied { read write } for pid=3987 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200324004.055:61): arch=c000003e syscall=59 success=yes exit=0 a0=cfa760 a1=8d8e2f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3979 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200324004.580:62): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200324004.198:63): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200324004.198:63): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3979 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200324005.012:64): user pid=3979 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1200324006.260:65): user pid=3991 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200324007.230:66): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1200324007.233:67): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1200324007.234:68): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1200324007.234:69): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1200324007.235:70): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1200324015.554:71): avc: denied { read write } for pid=4124 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200324015.554:71): arch=c000003e syscall=59 success=yes exit=0 a0=10dae70 a1=1783ee0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3992 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200324015.975:72): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200324015.681:73): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200324015.681:73): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3992 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200324016.405:74): user pid=3992 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200324023.554:75): avc: denied { read write } for pid=4135 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200324023.554:75): arch=c000003e syscall=59 success=yes exit=0 a0=cfa760 a1=8d8e2f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=4127 pid=4135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200324023.980:76): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200324023.682:77): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200324023.682:77): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=4127 pid=4135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200324024.372:78): user pid=4127 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200324752.615:79): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1200324752.617:80): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1200324752.645:81): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1200324752.645:82): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1200324814.633:83): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1200324814.633:84): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1200324819.757:85): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1200324819.760:86): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1200324819.780:87): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1200324819.780:88): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1200325530.173:89): avc: denied { write } for pid=10095 comm="useradd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1200325530.173:89): arch=40000003 syscall=11 success=yes exit=0 a0=8103c48 a1=8103888 a2=8102578 a3=0 items=0 ppid=10094 pid=10095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200325530.254:90): user pid=10095 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1200325565.966:91): avc: denied { write } for pid=10156 comm="semodule" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1200325565.966:91): arch=40000003 syscall=11 success=yes exit=0 a0=81041a0 a1=8102788 a2=8102578 a3=0 items=0 ppid=10155 pid=10156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200325566.116:92): avc: denied { getattr } for pid=10156 comm="semodule" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1200325566.116:92): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8a871 a1=54 a2=ffbf1bfc a3=f7f8a871 items=0 ppid=10155 pid=10156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200325581.081:93): avc: denied { write } for pid=10200 comm="restorecon" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1200325581.081:93): arch=40000003 syscall=11 success=yes exit=0 a0=81060e8 a1=8106ce0 a2=8104a18 a3=0 items=0 ppid=10155 pid=10200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1200325911.228:94): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200325911.255:95): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200325911.318:96): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200325911.337:97): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200325942.093:98): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200325942.094:99): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200326461.720:100): user pid=11505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200326461.721:101): user pid=11505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200326461.721:102): login pid=11505 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200326461.761:103): user pid=11505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200326461.973:104): user pid=11505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200326461.974:105): user pid=11505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200326633.982:106): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1200326633.984:107): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1200328946.556:108): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1200328946.556:109): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200328953.523:110): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200328953.524:111): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200328953.639:112): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1200328953.639:113): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200329229.359:114): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200329229.360:115): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200329543.084:116): avc: denied { getattr } for pid=19674 comm="updatedb" path="/mnt/winxp/SFU/lib" dev=sda1 ino=66716 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:fusefs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1200329543.084:116): arch=c000003e syscall=6 success=yes exit=0 a0=611cb9 a1=7fffe5bf4bb0 a2=7fffe5bf4bb0 a3=3688d529f0 items=0 ppid=19668 pid=19674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null) >type=AVC msg=audit(1200329545.157:117): avc: denied { getattr } for pid=19674 comm="updatedb" path="/mnt/winxp/SFU/dev/comport1" dev=sda1 ino=74155 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:fusefs_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200329545.157:117): arch=c000003e syscall=6 success=yes exit=0 a0=611d69 a1=7fffe5bf49b0 a2=7fffe5bf49b0 a3=3688d529f0 items=0 ppid=19668 pid=19674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null) >type=USER_AUTH msg=audit(1200329572.034:118): user pid=19946 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200329572.035:119): user pid=19946 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200329572.035:120): user pid=19946 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200329581.998:121): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200329585.387:122): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200329585.390:123): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200329585.390:124): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200329585.391:125): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200329585.392:126): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200329585.392:127): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200329585.399:128): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200329585.399:129): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200329588.561:130): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1200329588.561:131): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200329588.632:132): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200329588.649:133): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200329588.649:134): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1200329588.649:135): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200329588.650:136): avc: denied { unlink } for pid=3012 comm="ssh-agent" name="agent.3011" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200329588.650:136): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff429b1470 a2=7fff429b1340 a3=0 items=0 ppid=1 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1200329605.073:79): auditd normal halt, sending auid=4294967295 pid=20472 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2143 >type=DAEMON_START msg=audit(1200414977.173:6022): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2141 res=success, auditd pid=2141 >type=CONFIG_CHANGE msg=audit(1200414977.273:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200414977.273:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200414977.308:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200414977.308:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200414981.999:8): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200414981.999:9): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200414983.639:10): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200414983.639:11): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200414999.696:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200414999.714:13): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200414999.774:14): avc: denied { create } for pid=3004 comm="ssh-agent" name="agent.3004" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200414999.774:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff65ea3020 a2=6e a3=0 items=0 ppid=2896 pid=3004 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200414999.776:15): avc: denied { write } for pid=2896 comm="login" name="agent.3004" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200414999.776:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff123196a0 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200414999.776:16): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200414999.784:17): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200414999.797:18): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200415010.825:19): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200415010.827:20): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200415010.828:21): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200415010.829:22): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200415010.829:23): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200415010.830:24): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200415019.961:25): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1200415020.097:26): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1200415023.981:27): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200415023.984:28): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200415023.985:29): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200415023.986:30): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200415023.986:31): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200415051.243:32): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200415051.246:33): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200415051.302:34): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200415051.302:35): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200415086.669:36): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200415086.670:37): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200415144.013:38): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200415144.013:39): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200415144.013:40): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200415144.014:41): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/mount" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200415906.276:42): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200415906.279:43): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200415906.280:44): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200415906.280:45): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200415906.280:46): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200416461.239:47): user pid=26330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200416461.240:48): user pid=26330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200416461.240:49): login pid=26330 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200416461.256:50): user pid=26330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200416461.392:51): user pid=26330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200416461.394:52): user pid=26330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200416950.034:53): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1200416950.037:54): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1200416950.053:55): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1200416950.053:56): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1200417227.325:57): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200417227.328:58): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200417227.329:59): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200417227.329:60): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200417537.358:61): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200417537.359:62): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200417541.373:63): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200417541.376:64): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200417541.378:65): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200417541.378:66): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200417541.378:67): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200417988.617:68): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1200417988.619:69): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1200418385.689:70): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200418385.690:71): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200418391.368:72): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200418391.371:73): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200418391.372:74): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200418391.372:75): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200418391.373:76): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200418665.586:77): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200418665.588:78): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200418665.590:79): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200418665.590:80): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200418687.910:81): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200418687.910:82): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200419224.308:83): user pid=31650 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200419224.308:84): user pid=31650 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200419224.308:85): user pid=31650 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200419233.495:86): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200419236.613:87): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200419236.615:88): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200419236.616:89): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200419236.617:90): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200419236.617:91): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200419236.617:92): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200419236.622:93): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200419236.622:94): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200419236.676:95): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200419236.677:96): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200419236.677:97): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200419236.677:98): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200419236.678:99): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1200419236.678:100): avc: denied { unlink } for pid=3005 comm="ssh-agent" name="agent.3004" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200419236.678:100): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff65ea2830 a2=7fff65ea2700 a3=0 items=0 ppid=1 pid=3005 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200419236.679:101): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200419236.680:102): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200419236.680:103): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1200419245.848:6023): auditd normal halt, sending auid=4294967295 pid=32165 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2141 >type=DAEMON_START msg=audit(1200419431.074:3402): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2142 res=success, auditd pid=2142 >type=CONFIG_CHANGE msg=audit(1200419431.173:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200419431.173:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200419431.201:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200419431.201:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200419435.908:8): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200419435.908:9): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200419437.292:10): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200419437.292:11): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200419467.589:12): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1200419467.604:13): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200419473.123:14): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1200419473.123:15): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200419477.249:16): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200419477.358:17): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200419477.409:18): avc: denied { create } for pid=3011 comm="ssh-agent" name="agent.3011" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200419477.409:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff3ffa65c0 a2=6e a3=0 items=0 ppid=2897 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200419477.410:19): avc: denied { write } for pid=2897 comm="login" name="agent.3011" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200419477.410:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff51fb1330 a2=6e a3=0 items=0 ppid=1 pid=2897 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200419477.412:20): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200419477.418:21): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200419477.431:22): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200419483.102:23): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200419483.104:24): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200419483.152:25): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200419483.152:26): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200419588.688:27): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200419588.691:28): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200419588.693:29): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200419588.693:30): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200419588.693:31): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200419614.154:32): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200419614.157:33): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200419614.158:34): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200419614.159:35): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200419614.159:36): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200419614.159:37): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/less" (terminal=tty2 res=success)' >type=AVC msg=audit(1200419944.998:38): avc: denied { write } for pid=3873 comm="semodule" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1200419944.998:38): arch=40000003 syscall=11 success=yes exit=0 a0=8104050 a1=8102660 a2=8102458 a3=0 items=0 ppid=3872 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200419945.076:39): avc: denied { getattr } for pid=3873 comm="semodule" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem >type=SYSCALL msg=audit(1200419945.076:39): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8a871 a1=54 a2=fff33f6c a3=f7f8a871 items=0 ppid=3872 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200419954.579:40): avc: denied { read write } for pid=3882 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200419954.579:40): arch=40000003 syscall=11 success=yes exit=0 a0=f80009e8 a1=fb71a860 a2=0 a3=0 items=0 ppid=3875 pid=3882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200419960.366:41): avc: denied { write } for pid=3922 comm="restorecon" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file >type=SYSCALL msg=audit(1200419960.366:41): arch=40000003 syscall=11 success=yes exit=0 a0=8105f98 a1=8106b90 a2=81048c8 a3=0 items=0 ppid=3872 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1200420039.241:42): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200420039.244:43): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200420039.245:44): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200420039.245:45): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200420039.246:46): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200420062.204:47): user pid=4373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200420062.205:48): user pid=4373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200420062.205:49): login pid=4373 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200420062.214:50): user pid=4373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200420065.127:51): user pid=4373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200420065.128:52): user pid=4373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200421337.279:53): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200421337.280:54): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200422092.970:55): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200422092.972:56): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200422092.979:57): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200422092.979:58): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200423661.141:59): user pid=9024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200423661.143:60): user pid=9024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200423661.143:61): login pid=9024 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200423661.149:62): user pid=9024 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200423661.176:63): user pid=9024 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200423661.177:64): user pid=9024 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200424146.968:65): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200424152.648:66): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200424155.056:67): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200424155.058:68): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200424155.059:69): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200424155.060:70): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200424155.060:71): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200424155.061:72): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200424155.180:73): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200424155.180:74): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200424155.243:75): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200424155.244:76): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200424155.245:77): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200424155.246:78): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200424155.246:79): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200424155.247:80): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200424155.248:81): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1200424155.249:82): avc: denied { unlink } for pid=3012 comm="ssh-agent" name="agent.3011" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200424155.249:82): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff3ffa5dd0 a2=7fff3ffa5ca0 a3=0 items=0 ppid=1 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200424155.250:83): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1200424164.439:3403): auditd normal halt, sending auid=4294967295 pid=10006 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2142 >type=DAEMON_START msg=audit(1200498685.579:734): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2141 res=success, auditd pid=2141 >type=CONFIG_CHANGE msg=audit(1200498685.679:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200498685.679:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200498685.715:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200498685.715:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200498690.165:8): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200498690.165:9): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200498692.112:10): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200498692.112:11): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200498711.081:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1200498711.097:13): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200498715.226:14): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200498715.243:15): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200498715.296:16): avc: denied { create } for pid=3008 comm="ssh-agent" name="agent.3008" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200498715.296:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fffdc69ed50 a2=6e a3=0 items=0 ppid=2896 pid=3008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200498715.298:17): avc: denied { write } for pid=2896 comm="login" name="agent.3008" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200498715.298:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffa248c810 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200498715.300:18): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200498715.305:19): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200498715.318:20): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200498724.173:21): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200498724.176:22): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200498724.177:23): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200498724.178:24): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200498724.178:25): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200498724.179:26): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200498926.817:27): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200498926.820:28): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200498926.821:29): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200498926.822:30): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200498926.822:31): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=ANOM_ABEND msg=audit(1200498967.270:32): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=3802 comm="X" sig=6 >type=USER_CHAUTHTOK msg=audit(1200499018.761:33): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499018.761:34): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499018.762:35): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499018.762:36): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499018.762:37): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499018.774:38): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499018.789:39): user pid=4848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499018.804:40): user pid=4850 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499018.824:41): user pid=4855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499018.825:42): user pid=4855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200499203.199:43): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200499203.201:44): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200499203.223:45): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200499203.223:46): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200499253.420:47): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200499253.421:48): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200499261.387:49): user pid=5607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200499261.388:50): user pid=5607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200499261.388:51): login pid=5607 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200499261.403:52): user pid=5607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200499261.532:53): user pid=5607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200499261.533:54): user pid=5607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200499301.325:55): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200499301.327:56): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200499301.334:57): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200499301.334:58): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200499324.469:59): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200499324.470:60): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.100:61): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.100:62): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499403.100:63): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.101:64): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.101:65): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.107:66): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499403.122:67): user pid=6450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499403.135:68): user pid=6452 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.151:69): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499403.151:70): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.713:71): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.713:72): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499534.713:73): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.713:74): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.713:75): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.735:76): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499534.750:77): user pid=6835 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200499534.763:78): user pid=6837 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.780:79): user pid=6842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499534.780:80): user pid=6842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200499541.641:81): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200499541.644:82): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200499541.646:83): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200499541.646:84): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200499541.646:85): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CHAUTHTOK msg=audit(1200499628.313:86): user pid=7208 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499628.319:87): user pid=7212 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499639.509:88): user pid=7656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200499644.585:89): user pid=7703 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1200499875.362:90): auid=4294967295 uid=500 gid=101 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 pid=29029 comm="lt-gst" sig=11 >type=USER_AUTH msg=audit(1200500258.080:91): user pid=29919 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200500258.080:92): user pid=29919 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200500258.081:93): user pid=29919 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200500267.416:94): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200500267.418:95): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200500267.418:96): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200500267.419:97): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200500267.419:98): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200500267.420:99): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200500267.425:100): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200500267.425:101): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200500267.583:102): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200500267.583:103): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200500267.584:104): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200500267.584:105): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200500267.585:106): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200500267.586:107): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200500267.587:108): avc: denied { unlink } for pid=3009 comm="ssh-agent" name="agent.3008" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200500267.587:108): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffdc69e560 a2=7fffdc69e430 a3=0 items=0 ppid=1 pid=3009 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1200500277.217:735): auditd normal halt, sending auid=4294967295 pid=30424 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2141 >type=DAEMON_START msg=audit(1200586572.027:8324): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2143 res=success, auditd pid=2143 >type=CONFIG_CHANGE msg=audit(1200586572.127:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200586572.127:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200586572.155:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200586572.155:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200586577.044:8): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200586577.044:9): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200586579.307:10): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200586579.307:11): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200586605.132:12): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200586605.150:13): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200586605.202:14): avc: denied { create } for pid=3007 comm="ssh-agent" name="agent.3007" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200586605.202:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff70e5cf0 a2=6e a3=0 items=0 ppid=2898 pid=3007 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200586605.204:15): avc: denied { write } for pid=2898 comm="login" name="agent.3007" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200586605.204:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7ffff41524d0 a2=6e a3=0 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200586605.204:16): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200586605.212:17): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200586605.224:18): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200586623.674:19): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200586623.677:20): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200586623.724:21): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200586623.725:22): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200586633.546:23): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200586633.546:24): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.757:25): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.758:26): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200586725.758:27): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.758:28): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.758:29): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.762:30): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200586725.776:31): user pid=3805 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200586725.789:32): user pid=3807 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.804:33): user pid=3812 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586725.805:34): user pid=3812 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200586764.544:35): user pid=3932 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200586999.029:36): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1200586999.052:37): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1200587003.402:38): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200587003.404:39): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200587003.406:40): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200587003.406:41): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200587003.406:42): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200587012.610:43): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200587012.613:44): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200587012.614:45): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200587012.615:46): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200587012.615:47): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200587012.616:48): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200587162.887:49): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)' >type=USER_LOGIN msg=audit(1200587162.887:50): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)' >type=USER_AUTH msg=audit(1200587176.840:51): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)' >type=USER_LOGIN msg=audit(1200587176.840:52): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)' >type=USER_AUTH msg=audit(1200587195.300:53): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1200587195.303:54): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1200587195.304:55): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1200587195.304:56): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1200587195.305:57): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1200587201.192:58): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200587201.192:59): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200587201.260:60): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200587201.260:61): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200587201.294:62): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200587201.295:63): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200587349.807:64): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200587349.809:65): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200587349.810:66): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200587349.811:67): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200587349.811:68): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200587349.811:69): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/steghide/devel" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200587350.349:70): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200587350.349:71): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200587350.436:72): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200587350.437:73): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200587350.438:74): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200587350.438:75): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200587350.439:76): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1200587350.443:77): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1200587350.443:78): avc: denied { unlink } for pid=3008 comm="ssh-agent" name="agent.3007" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200587350.443:78): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff70e5500 a2=7ffff70e53d0 a3=0 items=0 ppid=1 pid=3008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1200587358.837:8325): auditd normal halt, sending auid=4294967295 pid=12202 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2143 >type=DAEMON_START msg=audit(1200588497.276:6327): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1906 res=success, auditd pid=1906 >type=CONFIG_CHANGE msg=audit(1200588497.375:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200588497.375:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200588497.411:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200588497.411:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200588502.052:8): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200588502.052:9): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200588504.115:10): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200588504.116:11): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200588522.989:12): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1200588523.009:13): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200588527.666:14): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200588527.678:15): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200588527.730:16): avc: denied { create } for pid=2763 comm="ssh-agent" name="agent.2763" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200588527.730:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff63a39630 a2=6e a3=0 items=0 ppid=2650 pid=2763 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200588527.731:17): avc: denied { write } for pid=2650 comm="login" name="agent.2763" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200588527.731:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff50db0130 a2=6e a3=0 items=0 ppid=1 pid=2650 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200588527.733:18): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200588527.740:19): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200588527.753:20): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200588664.440:21): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200588664.442:22): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200588664.490:23): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200588664.490:24): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200588721.617:25): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200588721.618:26): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200588783.715:27): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200588783.717:28): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200588783.723:29): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200588783.723:30): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200588844.634:31): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200588844.634:32): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200589171.725:33): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589171.727:34): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200589171.733:35): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200589171.733:36): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200589187.212:37): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200589187.213:38): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589261.237:39): user pid=4725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200589261.238:40): user pid=4725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200589261.238:41): login pid=4725 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200589261.253:42): user pid=4725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200589261.390:43): user pid=4725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200589261.391:44): user pid=4725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200589535.370:45): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589535.372:46): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200589535.379:47): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200589535.379:48): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200589578.824:49): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200589578.825:50): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200589597.172:51): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589597.174:52): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200589597.180:53): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200589597.181:54): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200589790.107:55): user pid=5861 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589790.107:56): user pid=5861 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200589790.150:57): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200589790.151:58): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200589790.151:59): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200589790.152:60): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200589790.154:61): avc: denied { unlink } for pid=2764 comm="ssh-agent" name="agent.2763" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200589790.154:61): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff63a38e40 a2=7fff63a38d10 a3=0 items=0 ppid=1 pid=2764 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1200589798.376:6328): auditd normal halt, sending auid=4294967295 pid=6362 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1906 >type=DAEMON_START msg=audit(1200589868.142:3922): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1882 res=success, auditd pid=1882 >type=CONFIG_CHANGE msg=audit(1200589868.241:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200589868.241:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200589868.277:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200589868.277:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200589872.884:8): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200589872.884:9): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200589874.906:10): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200589874.907:11): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200589892.611:12): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1200589892.623:13): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200589896.167:14): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589896.180:15): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200589896.232:16): avc: denied { create } for pid=2747 comm="ssh-agent" name="agent.2747" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200589896.232:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff944276c0 a2=6e a3=0 items=0 ppid=2637 pid=2747 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200589896.234:17): avc: denied { write } for pid=2637 comm="login" name="agent.2747" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200589896.234:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff5a6289b0 a2=6e a3=0 items=0 ppid=1 pid=2637 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200589896.235:18): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200589896.242:19): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200589896.255:20): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200589913.303:21): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589913.305:22): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200589913.354:23): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200589913.354:24): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200589929.582:25): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200589929.582:26): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200589929.655:27): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200589929.655:28): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200589947.028:29): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200589947.030:30): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200589947.031:31): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200589947.031:32): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200589947.032:33): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200589953.722:34): avc: denied { search } for pid=3345 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200589953.722:34): arch=c000003e syscall=21 success=yes exit=0 a0=7fffa599ffa8 a1=4 a2=0 a3=7fffa599f413 items=0 ppid=3344 pid=3345 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=CRED_DISP msg=audit(1200589962.394:35): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200589962.394:36): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1200589998.328:37): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=3275 comm="X" sig=6 >type=AVC msg=audit(1200590028.715:38): avc: denied { search } for pid=3717 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200590028.715:38): arch=c000003e syscall=21 success=yes exit=0 a0=7fffb34fffa8 a1=4 a2=0 a3=7fffb34fef73 items=0 ppid=3716 pid=3717 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_AUTH msg=audit(1200590153.950:39): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200590153.950:40): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200590153.958:41): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200590153.959:42): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200590451.697:43): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200590451.697:44): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200590474.815:45): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200590474.816:46): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200592693.172:47): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200592693.174:48): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200592693.181:49): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200592693.181:50): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200592705.819:51): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200592705.820:52): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200592709.571:53): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200592709.572:54): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200592709.585:55): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200592709.585:56): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200592723.439:57): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200592723.439:58): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200592723.510:59): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200592723.510:60): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200592788.433:61): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200592788.433:62): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200592798.474:63): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200592798.475:64): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200592806.886:65): user pid=15541 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200592810.975:66): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200592810.978:67): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200592810.988:68): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200592810.989:69): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200592824.207:70): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200592824.207:71): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200592824.308:72): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200592824.308:73): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200592861.848:74): user pid=15934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200592861.849:75): user pid=15934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200592861.849:76): login pid=15934 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200592861.858:77): user pid=15934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200592862.011:78): user pid=15934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200592862.012:79): user pid=15934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200595455.492:80): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200595455.493:81): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200595459.562:82): avc: denied { getattr } for pid=24588 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200595459.562:82): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc3836980 a1=7fffc38228f0 a2=7fffc38228f0 a3=7fffc383698d items=0 ppid=24587 pid=24588 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1200595459.562:83): avc: denied { search } for pid=24588 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200595459.562:83): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc3836980 a1=7fffc38228f0 a2=7fffc38228f0 a3=7fffc383698d items=0 ppid=24587 pid=24588 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1200595459.662:84): avc: denied { search } for pid=24591 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200595459.662:84): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fffccfeb410 a2=7fffccfeb410 a3=61931b items=0 ppid=24588 pid=24591 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1200595459.750:85): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200595459.751:86): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200595459.862:87): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1200595459.862:88): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200595466.768:89): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200595466.769:90): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200595466.796:91): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1200595466.796:92): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.697:93): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.697:94): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200595601.697:95): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.697:96): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.697:97): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.781:98): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200595601.796:99): user pid=25006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200595601.812:100): user pid=25008 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.839:101): user pid=25013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595601.840:102): user pid=25013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200595633.595:103): user pid=25091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200595778.772:104): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200595778.772:105): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200595788.404:106): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200595788.406:107): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200595788.420:108): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200595788.420:109): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200595819.454:110): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200595819.454:111): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1200596085.466:112): user pid=3092 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200596088.221:113): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596088.222:114): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200596088.222:115): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596088.222:116): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596088.222:117): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596088.230:118): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200596088.258:119): user pid=3159 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200596088.287:120): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596088.371:121): user pid=3172 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596088.371:122): user pid=3172 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200596108.679:123): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200596231.683:124): user pid=11279 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200596237.405:125): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200596237.407:126): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200596237.448:127): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200596237.449:128): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200596299.854:129): avc: denied { getattr } for pid=11936 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200596299.854:129): arch=c000003e syscall=6 success=yes exit=0 a0=604443 a1=7fff089462a0 a2=7fff089462a0 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200596299.854:130): avc: denied { search } for pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200596299.854:130): arch=c000003e syscall=80 success=yes exit=0 a0=604443 a1=7fff08945fa0 a2=0 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200596299.854:131): avc: denied { read } for pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200596299.854:131): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200596299.861:132): avc: denied { getattr } for pid=11936 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200596299.861:132): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff08946110 a2=7fff08946110 a3=3688d529f0 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200596299.861:133): avc: denied { setattr } for pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200596299.861:133): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff089461a0 a2=3688d529d8 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200596299.861:134): avc: denied { rmdir } for pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200596299.861:134): arch=c000003e syscall=84 success=no exit=-39 a0=604443 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200596299.960:135): avc: denied { getattr } for pid=11936 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1200596299.960:135): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff08946110 a2=7fff08946110 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=CRED_DISP msg=audit(1200596327.698:136): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200596327.700:137): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200596331.597:138): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200596331.599:139): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200596331.612:140): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200596331.612:141): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200596366.560:142): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200596366.561:143): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200596461.065:144): user pid=12446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200596461.066:145): user pid=12446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200596461.066:146): login pid=12446 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200596461.082:147): user pid=12446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200596461.160:148): user pid=12446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200596461.161:149): user pid=12446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200596958.705:150): user pid=13120 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200596958.705:151): user pid=13120 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200596958.705:152): user pid=13120 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200596969.889:153): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200596975.778:154): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200596975.781:155): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200596975.807:156): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200596975.808:157): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200596975.808:158): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200596975.808:159): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200596975.815:160): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200596975.815:161): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200596975.869:162): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200596975.870:163): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200596975.870:164): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200596975.870:165): avc: denied { unlink } for pid=2748 comm="ssh-agent" name="agent.2747" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200596975.870:165): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff94426ed0 a2=7fff94426da0 a3=0 items=0 ppid=1 pid=2748 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200596975.871:166): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=DAEMON_END msg=audit(1200596990.175:3923): auditd normal halt, sending auid=4294967295 pid=13636 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1882 >type=DAEMON_START msg=audit(1200600514.191:1104): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1890 res=success, auditd pid=1890 >type=CONFIG_CHANGE msg=audit(1200600514.291:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200600514.291:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200600514.327:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200600514.327:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200600518.727:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200600518.727:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200600520.408:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200600520.409:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200600536.822:12): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200600536.840:13): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200600536.892:14): avc: denied { create } for pid=2753 comm="ssh-agent" name="agent.2753" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200600536.892:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff283259f0 a2=6e a3=0 items=0 ppid=2645 pid=2753 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200600536.893:15): avc: denied { write } for pid=2645 comm="login" name="agent.2753" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200600536.893:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffcf12d4b0 a2=6e a3=0 items=0 ppid=1 pid=2645 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200600536.894:16): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200600536.901:17): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200600536.915:18): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1200600656.311:19): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200600657.560:20): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600657.561:21): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200600657.561:22): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600657.561:23): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600657.561:24): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600657.566:25): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200600657.580:26): user pid=3220 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200600657.594:27): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600657.612:28): user pid=3227 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600657.613:29): user pid=3227 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200600729.218:30): user pid=3383 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1200600841.058:31): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200600841.061:32): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200600841.062:33): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200600841.062:34): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200600841.062:35): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200600848.154:36): avc: denied { search } for pid=6717 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200600848.154:36): arch=c000003e syscall=21 success=yes exit=0 a0=7fffe02bafa8 a1=4 a2=0 a3=7fffe02b8d33 items=0 ppid=6713 pid=6717 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_AUTH msg=audit(1200602580.799:37): user pid=15325 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200602580.799:38): user pid=15325 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200602580.799:39): user pid=15325 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200602595.580:40): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1200602598.332:41): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200602598.334:42): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200602598.346:43): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200602598.347:44): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200602598.347:45): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200602598.348:46): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200602598.354:47): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200602598.354:48): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200602598.418:49): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200602598.419:50): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200602598.434:51): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200602598.435:52): avc: denied { unlink } for pid=2754 comm="ssh-agent" name="agent.2753" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200602598.435:52): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff28325200 a2=7fff283250d0 a3=0 items=0 ppid=1 pid=2754 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200602598.436:53): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=DAEMON_END msg=audit(1200602608.282:1105): auditd normal halt, sending auid=4294967295 pid=15837 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1890 >type=DAEMON_START msg=audit(1200857610.158:8018): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1938 res=success, auditd pid=1938 >type=CONFIG_CHANGE msg=audit(1200857610.258:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200857610.258:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200857610.293:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200857610.293:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200857614.926:8): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200857614.926:9): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200857616.981:10): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200857616.981:11): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200857633.950:12): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200857633.968:13): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200857634.020:14): avc: denied { create } for pid=2806 comm="ssh-agent" name="agent.2806" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200857634.020:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2df11470 a2=6e a3=0 items=0 ppid=2696 pid=2806 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200857634.021:15): avc: denied { write } for pid=2696 comm="login" name="agent.2806" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200857634.021:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff3c66f9f0 a2=6e a3=0 items=0 ppid=1 pid=2696 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200857634.022:16): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200857634.029:17): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200857634.042:18): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200857641.455:19): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200857641.458:20): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200857641.459:21): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200857641.460:22): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200857641.460:23): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200857641.460:24): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200857716.362:25): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1200857716.380:26): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1200857720.385:27): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200857720.388:28): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200857720.389:29): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200857720.389:30): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200857720.390:31): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200857753.085:32): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200857753.088:33): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200857753.145:34): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200857753.146:35): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200857753.146:36): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200857753.147:37): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/mount" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200857759.475:38): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200857759.475:39): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200857759.476:40): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200857759.476:41): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/mount" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200857789.685:42): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200857789.686:43): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200857789.686:44): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200857789.687:45): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/umount" (terminal=tty2 res=success)' >type=AVC msg=audit(1200857797.035:46): avc: denied { read write } for pid=3286 comm="groupadd" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200857797.035:46): arch=c000003e syscall=59 success=yes exit=0 a0=8c9b00 a1=8c8280 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3285 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200857797.076:47): user pid=3286 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1200857797.077:48): avc: denied { read write } for pid=3287 comm="useradd" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200857797.077:48): arch=c000003e syscall=59 success=yes exit=0 a0=8ca800 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3285 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200857797.134:49): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1200857797.135:50): avc: denied { read write } for pid=3288 comm="groupadd" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200857797.135:50): arch=c000003e syscall=59 success=yes exit=0 a0=8caae0 a1=8cad30 a2=8c7fd0 a3=65 items=0 ppid=3285 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1200857797.137:51): user pid=3288 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200857797.139:52): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CMD msg=audit(1200857801.469:53): user pid=3296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="uumount" (terminal=tty2 res=failed)' >type=CRED_ACQ msg=audit(1200857814.208:54): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200857814.209:55): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200857814.209:56): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1200857814.209:57): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/umount" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200857865.219:58): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200857865.221:59): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200857865.222:60): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200857865.222:61): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200857865.222:62): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200857874.198:63): avc: denied { search } for pid=5147 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200857874.198:63): arch=c000003e syscall=21 success=yes exit=0 a0=7fff6c353fa8 a1=4 a2=0 a3=7fff6c351dd3 items=0 ppid=5141 pid=5147 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=AVC msg=audit(1200857927.749:64): avc: denied { read write } for pid=12932 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200857927.749:64): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccf90 a1=2aaab28ddfa0 a2=0 a3=0 items=0 ppid=9262 pid=12932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200857928.525:65): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200857927.972:66): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200857927.972:66): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=9262 pid=12932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200857984.209:67): user pid=29514 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1200857993.016:68): avc: denied { read write } for pid=30668 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200857993.016:68): arch=c000003e syscall=59 success=yes exit=0 a0=1478000 a1=1b3c2d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=29515 pid=30668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200857993.475:69): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200857993.157:70): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200857993.157:70): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=29515 pid=30668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200857993.908:71): user pid=29515 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200858002.928:72): avc: denied { read write } for pid=32180 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200858002.928:72): arch=c000003e syscall=59 success=yes exit=0 a0=1becd10 a1=8dcc060 a2=0 a3=2aaaaaaeb210 items=0 ppid=30675 pid=32180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200858003.371:73): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200858003.070:74): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200858003.070:74): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=30675 pid=32180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200858003.777:75): user pid=30675 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1200858005.113:76): user pid=32183 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1200858013.816:77): avc: denied { read write } for pid=32719 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200858013.816:77): arch=c000003e syscall=59 success=yes exit=0 a0=1478000 a1=1b3c2d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=32184 pid=32719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1200858013.930:78): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1200858013.933:79): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1200858013.935:80): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1200858013.935:81): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1200858013.935:82): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AVC msg=audit(1200858014.273:83): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200858013.975:84): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200858013.975:84): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=32184 pid=32719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200858014.743:85): user pid=32184 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200858023.290:86): avc: denied { read write } for pid=3080 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1200858023.290:86): arch=c000003e syscall=59 success=yes exit=0 a0=1becd10 a1=8dcc060 a2=0 a3=2aaaaaaeb210 items=0 ppid=788 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1200858023.749:87): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1200858023.442:88): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1200858023.442:88): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=788 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1200858024.194:89): user pid=788 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1200858375.560:90): user pid=25809 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200858377.370:91): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858377.370:92): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200858377.370:93): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858377.370:94): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858377.371:95): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858377.376:96): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200858377.410:97): user pid=25855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200858377.443:98): user pid=25859 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858377.473:99): user pid=25866 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858377.473:100): user pid=25866 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858498.665:101): user pid=26096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858498.671:102): user pid=26100 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858500.541:103): user pid=26132 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200858515.962:104): user pid=26605 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1200858703.904:105): auid=4294967295 uid=500 gid=101 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 pid=15341 comm="lt-gst" sig=11 >type=USER_ACCT msg=audit(1200859261.434:106): user pid=16452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200859261.436:107): user pid=16452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200859261.436:108): login pid=16452 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200859261.453:109): user pid=16452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200859261.665:110): user pid=16452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200859261.666:111): user pid=16452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.605:112): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.605:113): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200859558.605:114): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.605:115): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.605:116): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.611:117): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200859558.623:118): user pid=16944 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200859558.638:119): user pid=16946 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.660:120): user pid=16951 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200859558.660:121): user pid=16951 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200860398.955:122): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200860398.995:123): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200860761.933:124): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200860761.935:125): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200860761.965:126): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200860761.965:127): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200860783.027:128): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200860783.028:129): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200860876.978:130): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200860876.981:131): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200860876.981:132): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200860876.982:133): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200860876.982:134): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200860876.982:135): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel/smalltalk-3.0/packages/sport" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200861058.040:136): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200861058.043:137): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200861058.044:138): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200861058.044:139): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200861058.045:140): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CHAUTHTOK msg=audit(1200861286.100:141): user pid=22162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861288.015:142): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861288.015:143): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861288.016:144): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861288.016:145): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861288.016:146): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861288.032:147): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861288.045:148): user pid=22217 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861288.060:149): user pid=22219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861288.078:150): user pid=22224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861288.079:151): user pid=22224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861321.866:152): user pid=22346 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861321.871:153): user pid=22350 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861333.164:154): user pid=22793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861337.606:155): user pid=22835 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861607.414:156): user pid=11439 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861609.003:157): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861609.004:158): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861609.004:159): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861609.004:160): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861609.004:161): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861609.019:162): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861609.053:163): user pid=11487 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200861609.081:164): user pid=11491 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861609.120:165): user pid=11498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861609.120:166): user pid=11498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861628.118:167): user pid=11609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861628.123:168): user pid=11613 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861630.012:169): user pid=11647 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200861644.917:170): user pid=12120 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200862861.868:171): user pid=1823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200862861.869:172): user pid=1823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200862861.870:173): login pid=1823 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200862861.934:174): user pid=1823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200862862.148:175): user pid=1823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200862862.149:176): user pid=1823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1200863203.720:177): avc: denied { getattr } for pid=2468 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863203.720:177): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa812a280 a1=7fffa81161f0 a2=7fffa81161f0 a3=7fffa812a28d items=0 ppid=1 pid=2468 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1200863203.720:178): avc: denied { search } for pid=2468 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863203.720:178): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa812a280 a1=7fffa81161f0 a2=7fffa81161f0 a3=7fffa812a28d items=0 ppid=1 pid=2468 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1200863203.930:179): avc: denied { search } for pid=2474 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863203.930:179): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fffdc602c30 a2=7fffdc602c30 a3=61931b items=0 ppid=2468 pid=2474 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_START msg=audit(1200863204.208:180): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1200863204.208:181): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200863214.350:182): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200863214.350:183): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1200863214.422:184): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1200863214.422:185): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1200863471.315:186): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1200863471.316:187): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1200863830.921:188): avc: denied { getattr } for pid=5568 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863830.921:188): arch=c000003e syscall=6 success=yes exit=0 a0=604443 a1=7fff5add0730 a2=7fff5add0730 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200863830.921:189): avc: denied { search } for pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863830.921:189): arch=c000003e syscall=80 success=yes exit=0 a0=604443 a1=7fff5add0430 a2=0 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200863830.921:190): avc: denied { read } for pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863830.921:190): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200863830.935:191): avc: denied { getattr } for pid=5568 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200863830.935:191): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff5add05a0 a2=7fff5add05a0 a3=3688d529f0 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200863830.935:192): avc: denied { setattr } for pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863830.935:192): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff5add0630 a2=3688d529d8 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200863830.935:193): avc: denied { rmdir } for pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1200863830.935:193): arch=c000003e syscall=84 success=no exit=-39 a0=604443 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1200863831.034:194): avc: denied { getattr } for pid=5568 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1200863831.034:194): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff5add05a0 a2=7fff5add05a0 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_AUTH msg=audit(1200863878.100:195): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200863878.103:196): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200863878.122:197): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200863878.123:198): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200863878.123:199): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200863878.124:200): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200863878.180:201): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200863878.180:202): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200863878.268:203): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1200863878.270:204): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200863878.270:205): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200863878.271:206): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200863878.293:207): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200863878.294:208): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200863878.294:209): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200863878.294:210): avc: denied { unlink } for pid=2807 comm="ssh-agent" name="agent.2806" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200863878.294:210): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2df10c80 a2=7fff2df10b50 a3=0 items=0 ppid=1 pid=2807 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200863878.295:211): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=DAEMON_END msg=audit(1200863892.593:8019): auditd normal halt, sending auid=4294967295 pid=6188 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1938 >type=DAEMON_START msg=audit(1200931819.307:2575): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1891 res=success, auditd pid=1891 >type=CONFIG_CHANGE msg=audit(1200931819.407:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200931819.407:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200931819.443:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200931819.443:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200931823.943:8): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200931823.943:9): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200931825.492:10): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200931825.492:11): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200931849.451:12): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200931849.469:13): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200931849.521:14): avc: denied { create } for pid=2757 comm="ssh-agent" name="agent.2757" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200931849.521:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff137c5090 a2=6e a3=0 items=0 ppid=2646 pid=2757 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200931849.523:15): avc: denied { write } for pid=2646 comm="login" name="agent.2757" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200931849.523:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff30842bc0 a2=6e a3=0 items=0 ppid=1 pid=2646 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200931849.523:16): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200931849.531:17): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200931849.544:18): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200931862.143:19): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200931862.146:20): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200931862.147:21): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200931862.148:22): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200931862.148:23): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1200931862.149:24): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200932018.211:25): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200932018.214:26): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200932018.215:27): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200932018.215:28): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200932018.216:29): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200932024.584:30): avc: denied { search } for pid=3413 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200932024.584:30): arch=c000003e syscall=21 success=yes exit=0 a0=7fff3f6fdfa8 a1=4 a2=0 a3=7fff3f6fd173 items=0 ppid=3412 pid=3413 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1200932027.246:31): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=3467 comm="pulseaudio" sig=6 >type=USER_AUTH msg=audit(1200933897.288:32): user pid=5945 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200933897.288:33): user pid=5945 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200933897.288:34): user pid=5945 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200933938.397:35): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200933938.400:36): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200933938.400:37): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200933938.401:38): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200933938.401:39): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200933938.402:40): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200933938.408:41): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200933938.408:42): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200933938.487:43): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200933938.487:44): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200933938.490:45): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200933938.490:46): avc: denied { unlink } for pid=2758 comm="ssh-agent" name="agent.2757" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200933938.490:46): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff137c48a0 a2=7fff137c4770 a3=0 items=0 ppid=1 pid=2758 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200933938.491:47): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=DAEMON_END msg=audit(1200933947.778:2576): auditd normal halt, sending auid=4294967295 pid=6527 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1891 >type=DAEMON_START msg=audit(1200935109.324:5771): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1888 res=success, auditd pid=1888 >type=CONFIG_CHANGE msg=audit(1200935109.424:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200935109.424:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200935109.459:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200935109.459:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200935113.943:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200935113.943:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200935115.998:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200935115.998:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200935147.144:12): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1200935147.156:13): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1200935151.061:14): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200935151.079:15): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200935151.131:16): avc: denied { create } for pid=2756 comm="ssh-agent" name="agent.2756" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200935151.131:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff00069ed0 a2=6e a3=0 items=0 ppid=2643 pid=2756 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200935151.133:17): avc: denied { write } for pid=2643 comm="login" name="agent.2756" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200935151.133:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff8ee97220 a2=6e a3=0 items=0 ppid=1 pid=2643 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200935151.134:18): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200935151.141:19): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200935151.154:20): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200935175.906:21): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200935175.908:22): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200935175.956:23): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200935175.956:24): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200935187.764:25): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200935187.765:26): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200935454.654:27): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200935454.656:28): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200935454.658:29): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200935454.658:30): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200935454.658:31): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200935464.516:32): avc: denied { search } for pid=3804 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200935464.516:32): arch=c000003e syscall=21 success=yes exit=0 a0=7fff62fb7fa8 a1=4 a2=0 a3=7fff62fb6a33 items=0 ppid=3803 pid=3804 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_AUTH msg=audit(1200937435.008:33): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200937435.011:34): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200937435.012:35): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200937435.012:36): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200937435.013:37): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200937544.642:38): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1200937544.645:39): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1200937544.647:40): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1200937544.647:41): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1200937544.647:42): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1200937608.417:43): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1200937608.418:44): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CHAUTHTOK msg=audit(1200937646.787:45): user pid=8855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937646.793:46): user pid=8859 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937646.881:47): user pid=8865 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937653.174:48): user pid=8917 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937653.862:49): user pid=8938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937653.867:50): user pid=8942 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937654.980:51): user pid=8963 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200937654.992:52): user pid=8965 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1200937655.005:53): user pid=8967 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937655.022:54): user pid=8972 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1200937655.027:55): user pid=8972 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1200938461.162:56): user pid=10975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200938461.163:57): user pid=10975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200938461.164:58): login pid=10975 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200938461.179:59): user pid=10975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200938461.311:60): user pid=10975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200938461.312:61): user pid=10975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200939552.987:62): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200939552.989:63): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200939552.996:64): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200939552.996:65): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200939612.321:66): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200939612.324:67): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200939612.324:68): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200939612.325:69): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200939612.325:70): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200939612.326:71): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200939612.422:72): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200939612.422:73): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200939612.494:74): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200939612.495:75): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200939612.495:76): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200939612.495:77): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200939612.496:78): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200939612.496:79): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200939612.497:80): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200939612.498:81): avc: denied { unlink } for pid=2757 comm="ssh-agent" name="agent.2756" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200939612.498:81): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff000696e0 a2=7fff000695b0 a3=0 items=0 ppid=1 pid=2757 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1200939612.499:82): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=DAEMON_END msg=audit(1200939621.672:5772): auditd normal halt, sending auid=4294967295 pid=13657 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1888 >type=DAEMON_START msg=audit(1200941252.601:5148): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1887 res=success, auditd pid=1887 >type=CONFIG_CHANGE msg=audit(1200941252.700:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200941252.700:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1200941252.736:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1200941252.736:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1200941257.053:8): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1200941257.053:9): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1200941259.209:10): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1200941259.210:11): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1200941312.507:12): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200941312.525:13): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1200941312.577:14): avc: denied { create } for pid=2751 comm="ssh-agent" name="agent.2751" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200941312.577:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff89a1de70 a2=6e a3=0 items=0 ppid=2642 pid=2751 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1200941312.579:15): avc: denied { write } for pid=2642 comm="login" name="agent.2751" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200941312.579:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff13c9b020 a2=6e a3=0 items=0 ppid=1 pid=2642 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1200941312.579:16): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200941312.587:17): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1200941312.600:18): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200941323.196:19): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1200941323.199:20): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1200941323.247:21): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1200941323.247:22): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200941357.675:23): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200941357.676:24): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1200941581.677:25): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200941581.680:26): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200941581.681:27): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200941581.681:28): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1200941581.681:29): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200941589.209:30): avc: denied { search } for pid=3915 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1200941589.209:30): arch=c000003e syscall=21 success=yes exit=0 a0=7fff97660fa8 a1=4 a2=0 a3=7fff976600d3 items=0 ppid=3914 pid=3915 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_ACCT msg=audit(1200942061.477:31): user pid=4978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1200942061.479:32): user pid=4978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1200942061.479:33): login pid=4978 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1200942061.494:34): user pid=4978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1200942061.604:35): user pid=4978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1200942061.605:36): user pid=4978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1200943494.699:37): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1200943494.702:38): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1200943494.704:39): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1200943494.704:40): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1200943494.704:41): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1200945463.657:42): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200945463.660:43): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1200945463.660:44): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1200945463.661:45): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200945463.661:46): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1200945463.662:47): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1200945463.752:48): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1200945463.752:49): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1200945463.957:50): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1200945463.958:51): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1200945463.958:52): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1200945463.958:53): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1200945463.960:54): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1200945463.960:55): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1200945463.960:56): avc: denied { unlink } for pid=2752 comm="ssh-agent" name="agent.2751" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1200945463.960:56): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff89a1d680 a2=7fff89a1d550 a3=0 items=0 ppid=1 pid=2752 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1200945473.235:5149): auditd normal halt, sending auid=4294967295 pid=9509 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1887 >type=DAEMON_START msg=audit(1201013538.283:2910): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1888 res=success, auditd pid=1888 >type=CONFIG_CHANGE msg=audit(1201013538.382:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201013538.382:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201013538.418:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201013538.418:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201013542.984:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201013542.984:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201013545.437:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201013545.438:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201013561.460:12): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201013561.478:13): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201013561.531:14): avc: denied { create } for pid=2752 comm="ssh-agent" name="agent.2752" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201013561.531:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffcc333e70 a2=6e a3=0 items=0 ppid=2643 pid=2752 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201013561.532:15): avc: denied { write } for pid=2643 comm="login" name="agent.2752" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201013561.532:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff3dfad330 a2=6e a3=0 items=0 ppid=1 pid=2643 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201013561.532:16): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201013561.540:17): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201013561.553:18): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201013573.861:19): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201013573.864:20): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201013573.879:21): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201013573.880:22): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201013573.880:23): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201013573.881:24): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201013593.120:25): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201013593.123:26): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201013593.124:27): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201013593.124:28): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201013593.124:29): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201014061.422:30): user pid=3850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201014061.424:31): user pid=3850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201014061.424:32): login pid=3850 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201014061.455:33): user pid=3850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201014061.576:34): user pid=3850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201014061.577:35): user pid=3850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201014124.874:36): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1201014124.876:37): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1201014124.877:38): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1201014124.877:39): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1201014124.878:40): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1201014131.613:41): avc: denied { search } for pid=5236 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201014131.613:41): arch=c000003e syscall=21 success=yes exit=0 a0=7fff32549fa8 a1=4 a2=0 a3=7fff325495c3 items=0 ppid=5235 pid=5236 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_AUTH msg=audit(1201014607.985:42): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201014608.021:43): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201014608.483:44): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201014608.501:45): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201014795.126:46): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201014795.129:47): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201014795.145:48): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201014795.145:49): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1201014795.215:50): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CHAUTHTOK msg=audit(1201014847.035:51): user pid=10618 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201014848.561:52): user pid=10656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201014848.573:53): user pid=10658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201014848.585:54): user pid=10660 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201014848.604:55): user pid=10665 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201014848.604:56): user pid=10665 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201014992.095:57): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201014992.096:58): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1201015029.652:59): user pid=10927 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015029.657:60): user pid=10931 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015049.199:61): user pid=11018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015057.191:62): user pid=11063 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015080.130:63): user pid=11147 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015080.939:64): user pid=11161 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=avahi exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015080.947:65): user pid=11166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=avahi exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015083.319:66): user pid=11189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.807:67): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.808:68): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201015788.808:69): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.808:70): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.808:71): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.814:72): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201015788.827:73): user pid=12814 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201015788.840:74): user pid=12816 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.860:75): user pid=12821 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201015788.860:76): user pid=12821 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016028.884:77): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016028.891:78): user pid=13129 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016038.426:79): user pid=13195 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016043.898:80): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016043.905:81): user pid=13239 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016044.298:82): user pid=13248 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016045.441:83): user pid=13279 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201016045.456:84): user pid=13281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201016045.469:85): user pid=13283 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016045.485:86): user pid=13288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016045.489:87): user pid=13288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201016308.837:88): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201016308.865:89): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201016309.012:90): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201016309.025:91): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201016507.470:92): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201016507.472:93): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CHAUTHTOK msg=audit(1201016676.100:94): user pid=15023 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016686.647:95): user pid=15086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=avahi exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016686.654:96): user pid=15091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=avahi exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016686.925:97): user pid=15104 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utempter exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016709.926:98): user pid=15243 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201016725.160:99): user pid=15282 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.614:100): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.614:101): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201017405.614:102): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.614:103): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.614:104): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.648:105): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201017405.662:106): user pid=18964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201017405.677:107): user pid=18966 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.696:108): user pid=18971 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017405.697:109): user pid=18971 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.177:110): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.178:111): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201017508.178:112): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.178:113): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.178:114): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.182:115): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201017508.197:116): user pid=19168 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201017508.209:117): user pid=19170 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.226:118): user pid=19175 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017508.229:119): user pid=19175 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017577.719:120): user pid=19299 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017585.763:121): user pid=19357 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=avahi exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017585.770:122): user pid=19362 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=avahi exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017586.078:123): user pid=19375 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utempter exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017610.551:124): user pid=19516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201017624.481:125): user pid=19547 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201017662.917:126): user pid=20534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201017662.919:127): user pid=20534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201017662.919:128): login pid=20534 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201017663.839:129): user pid=20534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201017664.553:130): user pid=20534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201017664.554:131): user pid=20534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201019132.793:132): avc: denied { getattr } for pid=24788 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019132.793:132): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc88d5a20 a1=7fffc88c1990 a2=7fffc88c1990 a3=7fffc88d5a2d items=0 ppid=1 pid=24788 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201019132.793:133): avc: denied { search } for pid=24788 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019132.793:133): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc88d5a20 a1=7fffc88c1990 a2=7fffc88c1990 a3=7fffc88d5a2d items=0 ppid=1 pid=24788 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201019133.085:134): avc: denied { search } for pid=24802 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019133.085:134): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fff94ae7650 a2=7fff94ae7650 a3=61931b items=0 ppid=24788 pid=24802 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_START msg=audit(1201019133.527:135): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201019133.527:136): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201019145.123:137): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201019145.123:138): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201019145.163:139): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201019145.163:140): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201019397.043:141): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201019397.044:142): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201019802.136:143): avc: denied { getattr } for pid=30451 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019802.136:143): arch=c000003e syscall=6 success=yes exit=0 a0=6043db a1=7fffd0e557b0 a2=7fffd0e557b0 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201019802.136:144): avc: denied { search } for pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019802.136:144): arch=c000003e syscall=80 success=yes exit=0 a0=6043db a1=7fffd0e554b0 a2=0 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201019802.136:145): avc: denied { read } for pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019802.136:145): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201019802.143:146): avc: denied { getattr } for pid=30451 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201019802.143:146): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffd0e55620 a2=7fffd0e55620 a3=3688d529f0 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201019802.143:147): avc: denied { setattr } for pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019802.143:147): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffd0e556b0 a2=3688d529d8 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201019802.143:148): avc: denied { rmdir } for pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201019802.143:148): arch=c000003e syscall=84 success=no exit=-39 a0=6043db a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201019802.250:149): avc: denied { getattr } for pid=30451 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1201019802.250:149): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffd0e55620 a2=7fffd0e55620 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1201021261.639:150): user pid=32380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201021261.640:151): user pid=32380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201021261.640:152): login pid=32380 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201021261.676:153): user pid=32380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201021261.753:154): user pid=32380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201021261.754:155): user pid=32380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201022430.413:156): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1201022430.415:157): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1201022430.452:158): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1201022430.453:159): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1201022430.453:160): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1201022430.454:161): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1201022430.510:162): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1201022430.511:163): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1201022430.717:164): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1201022430.845:165): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1201022430.885:166): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201022430.890:167): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201022430.901:168): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201022430.907:169): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1201022430.928:170): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201022430.934:171): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201022430.943:172): avc: denied { unlink } for pid=2753 comm="ssh-agent" name="agent.2752" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201022430.943:172): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffcc333680 a2=7fffcc333550 a3=0 items=0 ppid=1 pid=2753 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1201022449.784:2911): auditd normal halt, sending auid=4294967295 pid=3792 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1888 >type=DAEMON_START msg=audit(1201100851.191:810): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1885 res=success, auditd pid=1885 >type=CONFIG_CHANGE msg=audit(1201100851.291:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201100851.291:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201100851.326:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201100851.326:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201100855.827:8): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201100855.827:9): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201100857.351:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201100857.351:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201100884.843:12): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201100884.861:13): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201100884.922:14): avc: denied { create } for pid=2748 comm="ssh-agent" name="agent.2748" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201100884.922:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffdf8aa0e0 a2=6e a3=0 items=0 ppid=2640 pid=2748 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201100884.923:15): avc: denied { write } for pid=2640 comm="login" name="agent.2748" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201100884.923:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff88d230a0 a2=6e a3=0 items=0 ppid=1 pid=2640 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201100884.923:16): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201100884.931:17): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201100884.944:18): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201100897.172:19): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201100897.175:20): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201100897.176:21): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201100897.177:22): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201100897.177:23): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201100897.178:24): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201101209.970:25): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201101209.970:26): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201101210.048:27): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201101210.049:28): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201101210.084:29): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201101210.085:30): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201101210.204:31): avc: denied { write } for pid=2062 comm="rsyslogd" name="news" dev=dm-2 ino=31786 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:innd_log_t:s0 tclass=dir >type=AVC msg=audit(1201101210.204:31): avc: denied { add_name } for pid=2062 comm="rsyslogd" name="news.debug" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:innd_log_t:s0 tclass=dir >type=SYSCALL msg=audit(1201101210.204:31): arch=c000003e syscall=2 success=yes exit=11 a0=63cf10 a1=541 a2=1a4 a3=63cb60 items=0 ppid=1 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rsyslogd" exe="/sbin/rsyslogd" subj=system_u:system_r:syslogd_t:s0 key=(null) >type=AVC msg=audit(1201101210.243:32): avc: denied { read write } for pid=3186 comm="groupadd" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101210.243:32): arch=c000003e syscall=59 success=yes exit=0 a0=8ca0b0 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=3185 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201101210.274:33): avc: denied { read write } for pid=3187 comm="useradd" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101210.274:33): arch=c000003e syscall=59 success=yes exit=0 a0=8caa10 a1=8c9450 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3185 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201101210.331:34): avc: denied { ioctl } for pid=3187 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101210.331:34): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffd5d498e0 a3=0 items=0 ppid=3185 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201101210.331:35): avc: denied { getattr } for pid=3187 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101210.331:35): arch=c000003e syscall=6 success=yes exit=0 a0=7fffd5d4df80 a1=7fffd5d49af0 a2=7fffd5d49af0 a3=0 items=0 ppid=3185 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201101210.331:36): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1201101383.032:37): avc: denied { read write } for pid=3419 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101383.032:37): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccf90 a1=2aaab28c3270 a2=0 a3=0 items=0 ppid=3399 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201101383.561:38): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201101383.171:39): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201101383.171:39): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3399 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1201101481.650:811): auditd normal halt, sending auid=4294967295 pid=3601 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1885 >type=DAEMON_START msg=audit(1201101481.788:7962): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=3623 res=success >type=CONFIG_CHANGE msg=audit(1201101481.888:42): audit_enabled=1 old=1 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201101481.888:43): audit_enabled=1 old=1 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201101481.902:44): audit_backlog_limit=320 old=320 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201101481.902:45): audit_backlog_limit=320 old=320 by auid=4294967295 res=1 >type=USER_ROLE_CHANGE msg=audit(1201101489.629:46): user pid=3639 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1201101497.259:47): avc: denied { read write } for pid=3647 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101497.259:47): arch=c000003e syscall=59 success=yes exit=0 a0=b17430 a1=20738d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3640 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201101497.787:48): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201101497.403:49): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201101497.403:49): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3640 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201101498.228:50): user pid=3640 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201101506.109:51): avc: denied { read write } for pid=3656 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101506.109:51): arch=c000003e syscall=59 success=yes exit=0 a0=181caf0 a1=47bd0d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3649 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201101506.589:52): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201101506.238:53): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201101506.238:53): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3649 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201101507.028:54): user pid=3649 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1201101508.540:55): user pid=3659 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1201101516.770:56): avc: denied { read write } for pid=3667 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101516.770:56): arch=c000003e syscall=59 success=yes exit=0 a0=b17430 a1=20738d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3660 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201101517.211:57): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201101516.907:58): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201101516.907:58): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3660 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201101517.621:59): user pid=3660 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201101525.567:60): avc: denied { read write } for pid=3676 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201101525.567:60): arch=c000003e syscall=59 success=yes exit=0 a0=181caf0 a1=47bd0d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3669 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201101525.999:61): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201101525.701:62): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201101525.701:62): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3669 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201101526.452:63): user pid=3669 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201101578.439:64): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201101578.442:65): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201101578.443:66): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201101578.444:67): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201101578.444:68): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201101578.444:69): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201101578.561:70): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201101578.561:71): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201101578.669:72): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201101578.670:73): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201101578.670:74): avc: denied { unlink } for pid=2749 comm="ssh-agent" name="agent.2748" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201101578.670:74): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffdf8a98f0 a2=7fffdf8a97c0 a3=0 items=0 ppid=1 pid=2749 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1201101585.518:7963): auditd normal halt, sending auid=4294967295 pid=4198 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201103721.789:6944): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2062 res=success >type=CONFIG_CHANGE msg=audit(1201103721.889:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201103721.889:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201103722.193:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201103722.193:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201103723.234:8): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201103723.234:9): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201103725.123:10): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201103725.123:11): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201103857.377:12): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1201103882.293:13): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201103882.307:14): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201103882.385:15): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201103882.501:16): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201103917.187:17): avc: denied { execheap } for pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201103917.187:17): arch=c000003e syscall=10 success=yes exit=0 a0=f08000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1201104061.840:18): user pid=3822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201104061.841:19): user pid=3822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201104061.841:20): login pid=3822 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201104061.892:21): user pid=3822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201104062.043:22): user pid=3822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201104062.044:23): user pid=3822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201105595.735:24): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201105595.736:25): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1201105602.698:6945): auditd normal halt, sending auid=4294967295 pid=5729 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201108404.580:3962): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2068 res=success >type=CONFIG_CHANGE msg=audit(1201108404.679:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201108404.679:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201108404.986:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201108404.986:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201108406.043:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201108406.043:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201108407.832:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201108407.832:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201108443.062:12): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201108443.080:13): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201108443.166:14): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201108443.257:15): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1201108445.881:16): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3068 comm="pulseaudio" sig=6 >type=USER_AUTH msg=audit(1201108453.224:17): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201108453.227:18): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201108453.228:19): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201108453.229:20): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201108453.229:21): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201108477.393:22): avc: denied { execheap } for pid=3317 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201108477.393:22): arch=c000003e syscall=10 success=yes exit=0 a0=eff000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3317 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201108544.625:23): avc: denied { execheap } for pid=4770 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201108544.625:23): arch=c000003e syscall=10 success=yes exit=0 a0=1076000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4770 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201108563.731:24): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201108563.734:25): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201108563.736:26): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201108563.736:27): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201108563.737:28): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.928:29): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.928:30): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201108675.928:31): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.928:32): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.928:33): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.936:34): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201108675.950:35): user pid=11056 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201108675.965:36): user pid=11058 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.983:37): user pid=11063 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108675.984:38): user pid=11063 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108687.642:39): user pid=11133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.364:40): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.364:41): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201108832.364:42): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.364:43): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.365:44): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.371:45): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201108832.386:46): user pid=11788 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201108832.401:47): user pid=11790 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.419:48): user pid=11795 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108832.419:49): user pid=11795 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201108843.833:50): user pid=11860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.388:51): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.388:52): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201109837.388:53): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.388:54): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.388:55): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.450:56): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201109837.463:57): user pid=22291 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201109837.476:58): user pid=22293 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.491:59): user pid=22298 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109837.491:60): user pid=22298 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201109845.327:61): user pid=22346 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.813:62): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.813:63): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201110187.813:64): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.813:65): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.814:66): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.818:67): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201110187.832:68): user pid=23309 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201110187.847:69): user pid=23311 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.866:70): user pid=23316 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110187.866:71): user pid=23316 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110202.069:72): user pid=23411 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110582.956:73): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110582.956:74): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201110582.957:75): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110582.957:76): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110582.957:77): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110582.962:78): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201110582.975:79): user pid=26707 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201110582.988:80): user pid=26709 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110583.005:81): user pid=26714 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110583.006:82): user pid=26714 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201110589.241:83): user pid=26752 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201111261.814:84): user pid=30782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201111261.815:85): user pid=30782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201111261.815:86): login pid=30782 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201111261.902:87): user pid=30782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201111262.152:88): user pid=30782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201111262.153:89): user pid=30782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.358:90): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.358:91): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111326.358:92): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.358:93): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.358:94): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.364:95): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111326.377:96): user pid=31172 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111326.391:97): user pid=31174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.408:98): user pid=31179 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111326.408:99): user pid=31179 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111333.302:100): user pid=31224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.080:101): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.080:102): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111584.080:103): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.080:104): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.080:105): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.086:106): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111584.098:107): user pid=32146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111584.111:108): user pid=32148 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.131:109): user pid=32153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111584.132:110): user pid=32153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111627.245:111): user pid=4672 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.490:112): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.490:113): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111685.490:114): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.491:115): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.491:116): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.498:117): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111685.511:118): user pid=8573 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201111685.525:119): user pid=8575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.549:120): user pid=8580 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111685.549:121): user pid=8580 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201111697.093:122): user pid=8642 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112136.940:123): user pid=15989 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=rpm res=success' >type=USER_CHAUTHTOK msg=audit(1201112136.959:124): user pid=15990 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=rpm res=success' >type=USER_CHAUTHTOK msg=audit(1201112138.185:125): user pid=16003 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=dbus res=success' >type=USER_CHAUTHTOK msg=audit(1201112146.925:126): user pid=16030 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112147.432:127): user pid=16043 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=floppy res=success' >type=USER_CHAUTHTOK msg=audit(1201112147.441:128): user pid=16044 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=vcsa res=success' >type=USER_CHAUTHTOK msg=audit(1201112150.185:129): user pid=16333 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=utmp res=success' >type=USER_CHAUTHTOK msg=audit(1201112150.507:130): user pid=16339 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201112150.542:131): user pid=16343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201112150.571:132): user pid=16347 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112150.684:133): user pid=16354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112150.684:134): user pid=16354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112151.254:135): user pid=16377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=haldaemon res=success' >type=USER_CHAUTHTOK msg=audit(1201112158.667:136): user pid=16586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting user not found acct=mockbuild res=failed' >type=USER_CHAUTHTOK msg=audit(1201112158.682:137): user pid=16588 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupdel: op=deleting group acct=mockbuild res=failed' >type=USER_CHAUTHTOK msg=audit(1201112158.695:138): user pid=16590 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201112158.717:139): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201112158.717:140): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding home directory acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201112192.549:141): user pid=16662 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.114:142): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.114:143): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201112378.114:144): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.114:145): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.114:146): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.122:147): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201112378.156:148): user pid=24182 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201112378.189:149): user pid=24186 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.225:150): user pid=24193 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112378.226:151): user pid=24193 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201112382.097:152): user pid=24249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201113154.406:153): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting user entries acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113154.406:154): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting mail file acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113154.406:155): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113154.406:156): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113154.413:157): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=failed' >type=USER_CHAUTHTOK msg=audit(1201113154.425:158): user pid=26339 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupdel: op=deleting group acct=mockbuild res=failed' >type=USER_CHAUTHTOK msg=audit(1201113154.440:159): user pid=26341 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113154.460:160): user pid=26343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113154.461:161): user pid=26343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding home directory acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.147:162): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting user entries acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.148:163): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting mail file acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.148:164): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.148:165): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.157:166): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=failed' >type=USER_CHAUTHTOK msg=audit(1201113358.171:167): user pid=31529 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupdel: op=deleting group acct=mockbuild res=failed' >type=USER_CHAUTHTOK msg=audit(1201113358.186:168): user pid=31531 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.207:169): user pid=31533 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=mockbuild res=success' >type=USER_CHAUTHTOK msg=audit(1201113358.208:170): user pid=31533 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding home directory acct=mockbuild res=success' >type=USER_AUTH msg=audit(1201113491.279:171): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201113491.283:172): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201113491.330:173): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201113491.349:174): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1201113491.404:175): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1201113998.634:176): avc: denied { getattr } for pid=5354 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201113998.634:176): arch=c000003e syscall=6 success=yes exit=0 a0=7fff1643d590 a1=7fff16429500 a2=7fff16429500 a3=7fff1643d59d items=0 ppid=1 pid=5354 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201113998.634:177): avc: denied { search } for pid=5354 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201113998.634:177): arch=c000003e syscall=6 success=yes exit=0 a0=7fff1643d590 a1=7fff16429500 a2=7fff16429500 a3=7fff1643d59d items=0 ppid=1 pid=5354 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201113998.852:178): avc: denied { search } for pid=5368 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201113998.852:178): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fffad6e54a0 a2=7fffad6e54a0 a3=61931b items=0 ppid=5354 pid=5368 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_START msg=audit(1201113999.763:179): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201113999.763:180): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201114010.366:181): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201114010.367:182): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201114010.439:183): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201114010.439:184): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201114087.856:185): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1201114087.857:186): avc: denied { read write } for pid=5483 comm="unix_update" name="3" dev=devpts ino=5 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201114087.857:186): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaab31a238 a1=7fff1599ec30 a2=2aaaab51bf50 a3=3688d529f0 items=0 ppid=5480 pid=5483 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts3 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1201114087.859:187): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1201114088.009:188): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1201114088.009:189): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1201114088.035:190): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1201114088.036:191): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1201114088.207:192): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1201114088.210:193): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1201114088.227:194): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1201114088.227:195): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1201114339.127:196): avc: denied { transition } for pid=5835 comm="yum" path="/sbin/ldconfig" dev=dm-0 ino=1666437 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201114339.127:196): arch=c000003e syscall=59 success=yes exit=0 a0=f3d871d a1=7fff87d21be0 a2=8ab3110 a3=3f51813bb2 items=0 ppid=5740 pid=5835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1201114437.317:197): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201114437.317:198): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201114450.520:199): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1201114450.563:200): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1201114733.855:201): avc: denied { getattr } for pid=10564 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201114733.855:201): arch=c000003e syscall=6 success=yes exit=0 a0=604423 a1=7ffff5210b70 a2=7ffff5210b70 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201114733.855:202): avc: denied { search } for pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201114733.855:202): arch=c000003e syscall=80 success=yes exit=0 a0=604423 a1=7ffff5210870 a2=0 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201114733.855:203): avc: denied { read } for pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201114733.855:203): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201114733.862:204): avc: denied { getattr } for pid=10564 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201114733.862:204): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7ffff52109e0 a2=7ffff52109e0 a3=3688d529f0 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201114733.862:205): avc: denied { setattr } for pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201114733.862:205): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7ffff5210a70 a2=3688d529d8 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201114733.862:206): avc: denied { rmdir } for pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201114733.862:206): arch=c000003e syscall=84 success=no exit=-39 a0=604423 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201114733.936:207): avc: denied { getattr } for pid=10564 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1201114733.936:207): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7ffff52109e0 a2=7ffff52109e0 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1201114861.207:208): user pid=10721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201114861.208:209): user pid=10721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201114861.208:210): login pid=10721 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201114861.225:211): user pid=10721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201114861.277:212): user pid=10721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201114861.278:213): user pid=10721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201115080.899:214): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201115080.899:215): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201115082.130:216): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201115082.130:217): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201115082.131:218): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201115082.132:219): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201115082.133:220): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201115082.134:221): avc: denied { signal } for pid=2776 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201115082.134:221): arch=c000003e syscall=62 success=yes exit=0 a0=b25 a1=f a2=b25 a3=0 items=0 ppid=1 pid=2776 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201115082.134:222): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1201115091.619:3963): auditd normal halt, sending auid=4294967295 pid=11339 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201115189.779:8611): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2065 res=success >type=CONFIG_CHANGE msg=audit(1201115189.879:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201115189.879:7): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201115190.276:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201115190.276:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201115191.342:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201115191.342:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201115192.999:12): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201115192.999:13): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201115228.626:14): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201115228.644:15): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201115228.731:16): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201115228.839:17): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201115261.887:18): avc: denied { execheap } for pid=3203 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201115261.887:18): arch=c000003e syscall=10 success=yes exit=0 a0=efd000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3203 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201115379.055:19): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201115379.056:20): avc: denied { read write } for pid=3784 comm="unix_update" name="2" dev=devpts ino=4 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201115379.056:20): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaafb9b238 a1=7fff885a90b0 a2=2aaaafd9cf50 a3=3688d529f0 items=0 ppid=3780 pid=3784 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts2 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1201115379.059:21): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201115379.097:22): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201115379.097:23): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1201115401.105:24): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201115401.106:25): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201115405.050:26): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201115405.052:27): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201115405.069:28): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201115405.069:29): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1201115597.725:30): bool=allow_execheap val=1 old_val=0 auid=4294967295 >type=SYSCALL msg=audit(1201115597.725:30): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffa1d48fd0 a2=2 a3=2aaaab116082 items=0 ppid=4160 pid=4409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201115597.730:31): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AUTH msg=audit(1201115811.923:32): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201115811.926:33): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201115811.928:34): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201115811.928:35): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201115811.928:36): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201116553.048:37): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201116553.050:38): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201116560.155:39): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201116560.156:40): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201116560.171:41): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201116884.387:42): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201116936.135:43): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201116936.135:44): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201116936.788:45): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201116936.789:46): avc: denied { signal } for pid=2785 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201116936.789:46): arch=c000003e syscall=62 success=yes exit=0 a0=b2e a1=f a2=b2e a3=0 items=0 ppid=1 pid=2785 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201116936.789:47): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1201116943.305:8612): auditd normal halt, sending auid=4294967295 pid=6678 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201189383.748:182): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2073 res=success >type=CONFIG_CHANGE msg=audit(1201189383.848:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201189383.848:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201189384.361:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201189384.361:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201189385.369:8): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201189385.369:9): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201189387.175:10): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201189387.175:11): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201189403.389:12): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201189403.407:13): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201189403.460:14): avc: denied { create } for pid=2770 comm="ssh-agent" name="agent.2770" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201189403.460:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffc9d31310 a2=6e a3=0 items=0 ppid=2661 pid=2770 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201189403.461:15): avc: denied { write } for pid=2661 comm="login" name="agent.2770" dev=dm-0 ino=327845 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201189403.461:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff98f602e0 a2=6e a3=0 items=0 ppid=1 pid=2661 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201189403.461:16): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201189403.469:17): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201189403.482:18): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201189410.778:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201189410.781:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201189410.782:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201189410.783:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201189410.783:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201189410.784:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201189624.611:25): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201189624.612:26): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201189624.612:27): avc: denied { unlink } for pid=2771 comm="ssh-agent" name="agent.2770" dev=dm-0 ino=327845 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201189624.612:27): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffc9d30b20 a2=7fffc9d309f0 a3=0 items=0 ppid=1 pid=2771 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201189628.896:28): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1201189628.926:29): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=ls: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201189635.181:30): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1201189635.181:31): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201189639.426:32): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201189639.429:33): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201189639.435:34): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201189639.436:35): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201189639.436:36): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201189646.505:37): avc: denied { search } for pid=3355 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201189646.505:37): arch=c000003e syscall=21 success=yes exit=0 a0=7fff2b5a1fa8 a1=4 a2=0 a3=7fff2b5a1013 items=0 ppid=3354 pid=3355 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_AUTH msg=audit(1201189664.179:38): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201189664.182:39): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201189664.184:40): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201189664.184:41): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201189664.184:42): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201189784.440:43): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_LOGIN msg=audit(1201189784.440:44): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_AUTH msg=audit(1201189788.096:45): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201189788.099:46): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201189788.100:47): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201189788.100:48): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1201189788.101:49): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1201189800.662:50): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201189800.665:51): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201189800.665:52): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201189800.667:53): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201189800.667:54): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1201189800.667:55): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201189967.793:56): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201189967.794:57): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201189967.794:58): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1201189967.795:59): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=AVC msg=audit(1201190005.329:60): avc: denied { read write } for pid=4710 comm="load_policy" name="tty3" dev=tmpfs ino=228 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201190005.329:60): arch=c000003e syscall=59 success=yes exit=0 a0=1bccf20 a1=21d0de0 a2=0 a3=2aaaaaaec210 items=0 ppid=4690 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201190005.782:61): user pid=2113 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201190005.470:62): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201190005.470:62): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=4690 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRED_ACQ msg=audit(1201190042.700:63): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201190042.701:64): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201190042.701:65): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1201190042.701:66): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201190461.590:67): user pid=5254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201190461.591:68): user pid=5254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201190461.591:69): login pid=5254 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201190461.606:70): user pid=5254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201190461.735:71): user pid=5254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201190461.736:72): user pid=5254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201190662.042:73): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201190662.045:74): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201190662.054:75): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201190662.054:76): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201190738.510:77): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201190738.511:78): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201190760.265:79): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201190760.267:80): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201190760.268:81): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201190760.269:82): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201190760.269:83): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201190760.269:84): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201190823.230:85): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201190823.231:86): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201190823.231:87): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201190823.231:88): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201191361.597:89): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201191361.600:90): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201191361.600:91): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201191361.601:92): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201191361.601:93): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201191361.601:94): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SOURCES" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201191645.720:95): user pid=7318 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201191645.721:96): user pid=7318 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201191645.721:97): user pid=7318 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201191653.076:98): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201191653.079:99): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201191653.079:100): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201191653.080:101): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201191653.080:102): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201191653.080:103): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201191653.087:104): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201191653.087:105): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201191653.202:106): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201191653.203:107): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201191653.205:108): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201191653.206:109): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1201191653.207:110): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201191653.209:111): avc: denied { unlink } for pid=3140 comm="ssh-agent" name="agent.3139" dev=dm-0 ino=327845 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201191653.209:111): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffb2d4b250 a2=7fffb2d4b120 a3=0 items=0 ppid=1 pid=3140 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201191653.210:112): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1201191660.587:183): auditd normal halt, sending auid=4294967295 pid=7733 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201195233.962:8649): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2105 res=success >type=CONFIG_CHANGE msg=audit(1201195234.061:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201195234.061:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201195234.649:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201195234.649:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201195235.864:8): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201195235.864:9): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201195237.363:10): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201195237.363:11): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201195264.474:12): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201195264.492:13): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201195264.579:14): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201195264.695:15): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1201195278.743:16): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1201195278.904:17): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201195282.710:18): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201195282.712:19): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201195282.714:20): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201195282.714:21): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201195282.714:22): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201195302.449:23): avc: granted { execheap } for pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195302.449:23): arch=c000003e syscall=10 success=yes exit=0 a0=efa000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195307.053:24): avc: granted { execheap } for pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195307.053:24): arch=c000003e syscall=10 success=yes exit=0 a0=1057000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195307.187:25): avc: granted { execheap } for pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195307.187:25): arch=c000003e syscall=10 success=yes exit=0 a0=1038000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195307.733:26): avc: granted { execheap } for pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195307.733:26): arch=c000003e syscall=10 success=yes exit=0 a0=107f000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201195326.310:27): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201195326.313:28): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201195326.314:29): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201195326.315:30): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201195326.315:31): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201195326.316:32): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=AVC msg=audit(1201195367.736:33): avc: granted { execheap } for pid=3940 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195367.736:33): arch=c000003e syscall=10 success=yes exit=0 a0=10a6000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3940 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195368.032:34): avc: granted { execheap } for pid=3943 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195368.032:34): arch=c000003e syscall=10 success=yes exit=0 a0=10b4000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3943 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195368.036:35): avc: granted { execheap } for pid=3951 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195368.036:35): arch=c000003e syscall=10 success=yes exit=0 a0=1096000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3951 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195368.037:36): avc: granted { execheap } for pid=3950 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195368.037:36): arch=c000003e syscall=10 success=yes exit=0 a0=1091000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3950 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195368.301:37): avc: granted { execheap } for pid=3946 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195368.301:37): arch=c000003e syscall=10 success=yes exit=0 a0=10d9000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3946 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195368.353:38): avc: granted { execheap } for pid=3954 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195368.353:38): arch=c000003e syscall=10 success=yes exit=0 a0=ab3000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3954 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195368.632:39): avc: granted { execheap } for pid=3390 comm="mono" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195368.632:39): arch=c000003e syscall=10 success=yes exit=0 a0=1083000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3390 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="mono" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201195374.135:40): avc: granted { execheap } for pid=3390 comm="mono" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201195374.135:40): arch=c000003e syscall=10 success=yes exit=0 a0=1113000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3390 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="mono" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201195934.280:41): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201195934.283:42): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201195934.283:43): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201195934.284:44): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201195934.284:45): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201195934.285:46): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201196169.421:47): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201196169.422:48): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201196169.422:49): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201196169.422:50): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201197661.828:51): user pid=7347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201197661.830:52): user pid=7347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201197661.830:53): login pid=7347 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201197661.842:54): user pid=7347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201197661.983:55): user pid=7347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201197661.984:56): user pid=7347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201200828.120:57): avc: denied { getattr } for pid=10690 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201200828.120:57): arch=c000003e syscall=6 success=yes exit=0 a0=7fffadd0f340 a1=7fffadcfb2b0 a2=7fffadcfb2b0 a3=7fffadd0f34d items=0 ppid=10689 pid=10690 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201200828.120:58): avc: denied { search } for pid=10690 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201200828.120:58): arch=c000003e syscall=6 success=yes exit=0 a0=7fffadd0f340 a1=7fffadcfb2b0 a2=7fffadcfb2b0 a3=7fffadd0f34d items=0 ppid=10689 pid=10690 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=USER_START msg=audit(1201200828.222:59): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201200828.222:60): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201200828.252:61): avc: denied { search } for pid=10705 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201200828.252:61): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fff0f6821f0 a2=7fff0f6821f0 a3=61931b items=0 ppid=10690 pid=10705 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=CRED_DISP msg=audit(1201200835.160:62): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201200835.161:63): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201200835.194:64): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201200835.194:65): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201201080.857:66): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201201080.857:67): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201201262.028:68): user pid=11512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201201262.030:69): user pid=11512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201201262.030:70): login pid=11512 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201201262.045:71): user pid=11512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201201262.123:72): user pid=11512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201201262.124:73): user pid=11512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201201293.987:74): avc: denied { getattr } for pid=11562 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201293.987:74): arch=c000003e syscall=6 success=yes exit=0 a0=60442b a1=7fff18fc6930 a2=7fff18fc6930 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201201293.987:75): avc: denied { search } for pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201293.987:75): arch=c000003e syscall=80 success=yes exit=0 a0=60442b a1=7fff18fc6630 a2=0 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201201293.987:76): avc: denied { read } for pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201293.987:76): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201201293.994:77): avc: denied { getattr } for pid=11562 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201201293.994:77): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff18fc67a0 a2=7fff18fc67a0 a3=3688d529f0 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201201293.994:78): avc: denied { setattr } for pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201293.994:78): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff18fc6830 a2=3688d529d8 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201201293.994:79): avc: denied { rmdir } for pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201201293.994:79): arch=c000003e syscall=84 success=no exit=-39 a0=60442b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201201294.039:80): avc: denied { getattr } for pid=11562 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1201201294.039:80): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff18fc67a0 a2=7fff18fc67a0 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_AUTH msg=audit(1201201747.201:81): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201201747.204:82): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201201747.206:83): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201201747.206:84): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201201747.251:85): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201204714.364:86): user pid=29640 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201204725.081:87): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201204725.084:88): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201204725.100:89): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201204725.100:90): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201204748.570:91): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201204748.571:92): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201204861.140:93): user pid=4232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201204861.142:94): user pid=4232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201204861.142:95): login pid=4232 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201204861.163:96): user pid=4232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201204861.198:97): user pid=4232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201204861.199:98): user pid=4232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201206035.578:99): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201206035.592:100): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201206036.900:101): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201206036.901:102): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201206036.904:103): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201206036.905:104): avc: denied { signal } for pid=2836 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201206036.905:104): arch=c000003e syscall=62 success=yes exit=0 a0=b60 a1=f a2=b60 a3=0 items=0 ppid=1 pid=2836 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201206036.905:105): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1201206048.977:8650): auditd normal halt, sending auid=4294967295 pid=21572 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201206355.583:5133): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2069 res=success >type=CONFIG_CHANGE msg=audit(1201206355.682:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201206355.682:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201206356.204:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201206356.204:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201206357.253:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201206357.253:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201206359.051:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201206359.051:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201206376.036:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201206376.054:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201206376.106:14): avc: denied { create } for pid=2767 comm="ssh-agent" name="agent.2767" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201206376.106:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff6c205c0 a2=6e a3=0 items=0 ppid=2657 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201206376.118:15): avc: denied { write } for pid=2657 comm="login" name="agent.2767" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201206376.118:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff39cff260 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201206376.118:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201206376.124:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201206376.137:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201207411.279:19): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201207411.282:20): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201207411.284:21): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201207411.284:22): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201207411.284:23): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201208461.658:24): user pid=23893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201208461.660:25): user pid=23893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201208461.660:26): login pid=23893 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201208461.673:27): user pid=23893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201208461.795:28): user pid=23893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201208461.796:29): user pid=23893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201209193.565:30): user pid=6199 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201209376.363:31): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201209376.365:32): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201209376.365:33): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201209376.366:34): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201209376.366:35): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201209376.367:36): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/libtool/devel" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201209376.486:37): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201209376.486:38): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201209376.553:39): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201209376.553:40): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201209376.554:41): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201209376.554:42): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201209376.556:43): avc: denied { unlink } for pid=2768 comm="ssh-agent" name="agent.2767" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201209376.556:43): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff6c1fdd0 a2=7ffff6c1fca0 a3=0 items=0 ppid=1 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1201209383.036:5134): auditd normal halt, sending auid=4294967295 pid=20449 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201462218.740:4952): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2066 res=success >type=CONFIG_CHANGE msg=audit(1201462218.840:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201462218.840:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201462219.386:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201462219.386:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201462220.327:8): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201462220.327:9): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201462221.951:10): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201462221.952:11): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201462240.989:12): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1201462241.003:13): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201462245.205:14): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201462245.224:15): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201462245.276:16): avc: denied { create } for pid=2765 comm="ssh-agent" name="agent.2765" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201462245.276:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff45b14290 a2=6e a3=0 items=0 ppid=2654 pid=2765 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201462245.302:17): avc: denied { write } for pid=2654 comm="login" name="agent.2765" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201462245.302:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffdabb3f30 a2=6e a3=0 items=0 ppid=1 pid=2654 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201462245.302:18): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201462245.319:19): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201462245.332:20): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201462257.735:21): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201462257.737:22): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201462257.738:23): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201462257.740:24): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201462257.740:25): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201462257.741:26): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201462433.165:27): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201462433.168:28): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201462433.169:29): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201462433.170:30): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201462433.170:31): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201462522.904:32): avc: denied { read write } for pid=3297 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462522.904:32): arch=c000003e syscall=59 success=yes exit=0 a0=8c9b00 a1=8c8280 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3296 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201462522.945:33): user pid=3297 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1201462522.970:34): avc: denied { read write } for pid=3298 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462522.970:34): arch=c000003e syscall=59 success=yes exit=0 a0=8ca800 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3296 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201462523.003:35): user pid=3298 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201462523.006:36): user pid=3299 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201462523.008:37): user pid=3300 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1201462561.339:38): avc: denied { read write } for pid=3338 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462561.339:38): arch=c000003e syscall=59 success=yes exit=0 a0=8cb3c0 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=3335 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201462561.341:39): avc: denied { ioctl } for pid=3338 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462561.341:39): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffcc3d3530 a3=2aaaaf54e412 items=0 ppid=3335 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201462561.341:40): avc: denied { getattr } for pid=3338 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462561.341:40): arch=c000003e syscall=6 success=yes exit=0 a0=7fffcc3d7bd0 a1=7fffcc3d3740 a2=7fffcc3d3740 a3=2aaaaf54e412 items=0 ppid=3335 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201462561.341:41): user pid=3338 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=beaglidx exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1201462561.344:42): avc: denied { ioctl } for pid=3339 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462561.344:42): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffa2296350 a3=2aaaaf5cfd32 items=0 ppid=3335 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201462561.344:43): avc: denied { getattr } for pid=3339 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201462561.344:43): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa229a9f0 a1=7fffa2296560 a2=7fffa2296560 a3=2aaaaf5cfd32 items=0 ppid=3335 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201462561.344:44): user pid=3339 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=beaglidx exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201462601.189:45): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201462601.192:46): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201462601.193:47): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201462601.193:48): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1201462601.583:49): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1201462767.976:50): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201462767.979:51): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201462768.060:52): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201462768.060:53): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201462900.886:54): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201462900.889:55): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201462900.889:56): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201462900.890:57): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201462900.890:58): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201462900.890:59): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201462934.090:60): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201462934.091:61): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201462934.091:62): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201462934.091:63): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=AVC msg=audit(1201463098.490:64): avc: denied { search } for pid=25832 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201463098.490:64): arch=c000003e syscall=21 success=yes exit=0 a0=7fffa8ef5fa8 a1=4 a2=0 a3=7fffa8ef4973 items=0 ppid=25831 pid=25832 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=CRED_DISP msg=audit(1201463814.251:65): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201463814.252:66): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201464061.774:67): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201464061.775:68): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201464061.776:69): login pid=6738 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201464061.789:70): user pid=6738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201464061.904:71): user pid=6738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201464061.905:72): user pid=6738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201465646.485:73): user pid=8240 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201465646.485:74): user pid=8240 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201465646.485:75): user pid=8240 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201465653.002:76): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201465653.005:77): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201465653.005:78): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201465653.007:79): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201465653.007:80): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201465653.007:81): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201465653.014:82): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201465653.014:83): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201465653.094:84): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201465653.094:85): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201465653.095:86): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201465653.095:87): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1201465653.096:88): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201465653.097:89): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201465653.098:90): avc: denied { unlink } for pid=2766 comm="ssh-agent" name="agent.2765" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201465653.098:90): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff45b13aa0 a2=7fff45b13970 a3=0 items=0 ppid=1 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1201465659.616:4953): auditd normal halt, sending auid=4294967295 pid=8654 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201542644.234:1046): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2068 res=success >type=CONFIG_CHANGE msg=audit(1201542644.334:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201542644.334:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201542644.897:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201542644.897:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201542645.979:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201542645.979:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201542647.785:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201542647.786:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201542663.775:12): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201542663.793:13): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201542663.845:14): avc: denied { create } for pid=2648 comm="ssh-agent" name="agent.2648" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201542663.845:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffbc0fafe0 a2=6e a3=0 items=0 ppid=2608 pid=2648 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201542663.860:15): avc: denied { write } for pid=2608 comm="login" name="agent.2648" dev=dm-0 ino=1340668 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201542663.860:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff1d4fc880 a2=6e a3=0 items=0 ppid=1 pid=2608 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201542663.861:16): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201542663.872:17): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201542663.885:18): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201542683.056:19): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201542683.058:20): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201542683.115:21): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201542683.115:22): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201542757.655:23): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1201542757.674:24): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=s4504kw: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1201542761.664:25): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201542761.667:26): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201542761.669:27): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201542761.669:28): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201542761.669:29): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201542774.112:30): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201542774.115:31): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201542774.115:32): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201542774.116:33): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201542774.116:34): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201542774.117:35): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/emacs" (terminal=tty2 res=success)' >type=AVC msg=audit(1201543046.119:36): avc: denied { read write } for pid=4660 comm="userdel" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201543046.119:36): arch=c000003e syscall=59 success=yes exit=0 a0=8cad80 a1=8c9690 a2=8c8d70 a3=65 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201543046.148:37): avc: denied { search } for pid=4660 comm="userdel" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=AVC msg=audit(1201543046.148:37): avc: denied { read } for pid=4660 comm="userdel" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201543046.148:37): arch=c000003e syscall=2 success=no exit=-2 a0=7fffa8a61cd0 a1=0 a2=2aaaaaaab000 a3=0 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201543046.164:38): avc: denied { ioctl } for pid=4660 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201543046.164:38): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffa8a5dc80 a3=3688d529f0 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201543046.164:39): avc: denied { getattr } for pid=4660 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201543046.164:39): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa8a62320 a1=7fffa8a5de90 a2=7fffa8a5de90 a3=3688d529f0 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201543046.164:40): user pid=4660 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CHAUTHTOK msg=audit(1201543046.177:41): user pid=4660 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1201543047.786:42): user pid=4663 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1201543047.878:43): avc: denied { read write } for pid=4666 comm="groupdel" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201543047.878:43): arch=c000003e syscall=59 success=yes exit=0 a0=8cb090 a1=8cb020 a2=8cb0b0 a3=65 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201543047.924:44): avc: denied { search } for pid=4666 comm="groupdel" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=AVC msg=audit(1201543047.924:44): avc: denied { search } for pid=4666 comm="groupdel" name="db2inst" dev=dm-1 ino=4259844 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201543047.924:44): avc: denied { search } for pid=4666 comm="groupdel" name="sqllib" dev=dm-1 ino=4259854 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=dir >type=AVC msg=audit(1201543047.924:44): avc: denied { read } for pid=4666 comm="groupdel" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201543047.924:44): arch=c000003e syscall=2 success=no exit=-2 a0=7fff23aea540 a1=0 a2=2aaaaaaab000 a3=0 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201543047.943:45): avc: denied { ioctl } for pid=4666 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201543047.943:45): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff23ae6950 a3=2aaaaf5513f2 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201543047.943:46): avc: denied { getattr } for pid=4666 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201543047.943:46): arch=c000003e syscall=6 success=yes exit=0 a0=7fff23aeaff0 a1=7fff23ae6b60 a2=7fff23ae6b60 a3=2aaaaf5513f2 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1201543047.943:47): user pid=4666 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_CHAUTHTOK msg=audit(1201543047.948:48): user pid=4667 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201543047.988:49): user pid=4671 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201543261.054:50): user pid=4916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201543261.056:51): user pid=4916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201543261.056:52): login pid=4916 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201543261.062:53): user pid=4916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201543261.183:54): user pid=4916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201543261.194:55): user pid=4916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201543411.210:56): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201543411.212:57): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201543524.017:58): avc: denied { search } for pid=5188 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201543524.017:58): arch=c000003e syscall=21 success=yes exit=0 a0=7fff625f1fa8 a1=4 a2=0 a3=7fff625f0073 items=0 ppid=5187 pid=5188 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_AUTH msg=audit(1201545040.371:59): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201545040.373:60): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201545040.380:61): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201545040.380:62): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201545070.248:63): user pid=7453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201545070.248:64): user pid=7453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201545070.295:65): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201545070.295:66): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201545070.296:67): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201545070.296:68): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201545070.298:69): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201545070.314:70): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201545070.315:71): avc: denied { unlink } for pid=2649 comm="ssh-agent" name="agent.2648" dev=dm-0 ino=1340668 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201545070.315:71): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffbc0fa7f0 a2=7fffbc0fa6c0 a3=0 items=0 ppid=1 pid=2649 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1201545077.917:1047): auditd normal halt, sending auid=4294967295 pid=7858 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201548981.260:9327): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2069 res=success >type=CONFIG_CHANGE msg=audit(1201548981.360:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201548981.360:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201548981.898:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201548981.898:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201548982.955:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201548982.955:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201548984.554:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201548984.554:12): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201549018.515:13): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201549018.533:14): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201549018.611:15): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201549018.736:16): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1201549021.693:17): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3082 comm="pulseaudio" sig=6 >type=USER_AUTH msg=audit(1201549049.247:18): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201549049.250:19): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201549049.255:20): avc: denied { create } for pid=3233 comm="ssh-agent" name="agent.3233" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201549049.255:20): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=7fff49bb58a0 a2=6e a3=0 items=0 ppid=2792 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1201549049.256:21): login pid=2792 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1201549049.267:22): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201549049.271:23): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201549049.271:24): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201549049.271:25): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201549051.694:26): avc: granted { execheap } for pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549051.694:26): arch=c000003e syscall=10 success=yes exit=0 a0=f01000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549173.882:27): avc: granted { execheap } for pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549173.882:27): arch=c000003e syscall=10 success=yes exit=0 a0=103f000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549173.966:28): avc: granted { execheap } for pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549173.966:28): arch=c000003e syscall=10 success=yes exit=0 a0=1053000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549174.281:29): avc: granted { execheap } for pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549174.281:29): arch=c000003e syscall=10 success=yes exit=0 a0=10a3000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549234.284:30): avc: granted { execheap } for pid=3927 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549234.284:30): arch=c000003e syscall=10 success=yes exit=0 a0=10bc000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3927 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549234.503:31): avc: granted { execheap } for pid=3930 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549234.503:31): arch=c000003e syscall=10 success=yes exit=0 a0=10d0000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3930 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549234.503:32): avc: granted { execheap } for pid=3931 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549234.503:32): arch=c000003e syscall=10 success=yes exit=0 a0=10c7000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3931 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549234.538:33): avc: granted { execheap } for pid=3938 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549234.538:33): arch=c000003e syscall=10 success=yes exit=0 a0=10cd000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3938 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201549234.541:34): avc: granted { execheap } for pid=3940 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201549234.541:34): arch=c000003e syscall=10 success=yes exit=0 a0=110e000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3940 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1201549767.889:35): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201549767.892:36): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201549772.212:37): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201549772.215:38): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201549772.216:39): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201549772.217:40): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201549772.217:41): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201550461.889:42): user pid=18957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201550461.890:43): user pid=18957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201550461.890:44): login pid=18957 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201550461.910:45): user pid=18957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201550462.058:46): user pid=18957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201550462.059:47): user pid=18957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201550636.106:48): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201550636.106:49): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201550636.725:50): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201550636.726:51): avc: denied { signal } for pid=4450 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201550636.726:51): arch=c000003e syscall=62 success=no exit=-13 a0=b32 a1=f a2=b32 a3=0 items=0 ppid=1 pid=4450 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201550636.727:52): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=DAEMON_END msg=audit(1201550643.453:9328): auditd normal halt, sending auid=4294967295 pid=19576 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201623501.340:3939): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2063 res=success >type=CONFIG_CHANGE msg=audit(1201623501.439:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201623501.439:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201623501.977:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201623501.977:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201623503.134:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201623503.134:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201623504.733:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201623504.733:12): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201623737.027:13): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1201623737.038:14): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201623742.287:15): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1201623742.287:16): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201623745.562:17): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201623745.580:18): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201623745.632:19): avc: denied { create } for pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201623745.632:19): arch=c000003e syscall=49 success=no exit=-13 a0=3 a1=7fffb72ca720 a2=6e a3=0 items=0 ppid=2786 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1201623745.633:20): login pid=2786 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1201623745.644:21): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201623745.649:22): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201623745.658:23): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201623745.659:24): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201623771.152:25): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201623771.203:26): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1201623777.709:3940): auditd normal halt, sending auid=4294967295 pid=3575 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201625390.505:1763): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2072 res=success >type=CONFIG_CHANGE msg=audit(1201625390.604:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201625390.604:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201625390.894:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201625390.894:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201625391.710:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201625391.711:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201625393.981:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201625393.981:12): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201625536.136:13): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201625536.154:14): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201625536.206:15): avc: denied { create } for pid=2860 comm="ssh-agent" name="agent.2860" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201625536.206:15): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=7fff603d6a00 a2=6e a3=0 items=0 ppid=2655 pid=2860 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1201625536.208:16): login pid=2655 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1201625536.245:17): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201625536.250:18): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201625536.257:19): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201625536.270:20): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201625547.627:21): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201625547.629:22): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201625547.630:23): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201625547.631:24): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201625547.631:25): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201625547.632:26): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=AVC msg=audit(1201625755.021:27): avc: denied { search } for pid=3275 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201625755.021:27): arch=c000003e syscall=21 success=no exit=-13 a0=7fffa8100fa8 a1=4 a2=0 a3=7fffa80feb73 items=0 ppid=3274 pid=3275 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null) >type=USER_ACCT msg=audit(1201626061.360:28): user pid=4280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201626061.361:29): user pid=4280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201626061.361:30): login pid=4280 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201626061.387:31): user pid=4280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201626061.531:32): user pid=4280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201626061.532:33): user pid=4280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201626078.759:34): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201626078.759:35): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201626078.799:36): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201626091.109:37): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201627074.118:38): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201627074.121:39): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1201627074.123:40): login pid=2656 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1201627074.136:41): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201627074.139:42): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201627074.140:43): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201627074.140:44): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201627349.556:45): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201627349.559:46): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=LOGIN msg=audit(1201627349.561:47): login pid=2657 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1201627349.574:48): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201627349.577:49): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201627349.577:50): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1201627349.578:51): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CHAUTHTOK msg=audit(1201627469.333:52): user pid=7148 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627469.341:53): user pid=7152 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627478.717:54): user pid=7245 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627478.723:55): user pid=7249 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627479.395:56): user pid=7260 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627480.316:57): user pid=7303 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201627480.327:58): user pid=7305 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201627480.339:59): user pid=7307 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627480.357:60): user pid=7312 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201627480.362:61): user pid=7312 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201627560.358:62): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201627560.361:63): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201627560.362:64): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201627560.363:65): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201627560.363:66): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1201627560.364:67): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201627569.237:68): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201627569.238:69): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201627569.238:70): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1201627569.238:71): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1201627625.263:72): user pid=7626 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1201627629.632:73): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201627629.634:74): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201627629.640:75): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201627629.640:76): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201627793.647:77): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201627793.648:78): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201627905.384:79): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201627905.386:80): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201627905.394:81): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201627905.394:82): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CHAUTHTOK msg=audit(1201628162.289:83): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201628162.290:84): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201628162.290:85): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201628162.291:86): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201628162.294:87): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201628162.307:88): user pid=9466 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1201628162.322:89): user pid=9468 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201628162.342:90): user pid=9473 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1201628162.347:91): user pid=9473 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201629661.566:92): user pid=11396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201629661.567:93): user pid=11396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201629661.567:94): login pid=11396 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201629661.582:95): user pid=11396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201629661.619:96): user pid=11396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201629661.621:97): user pid=11396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1201630980.400:98): avc: denied { getattr } for pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.400:98): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=12977 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.400:99): avc: denied { search } for pid=12978 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.400:99): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d2b items=0 ppid=12977 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.400:100): avc: denied { getattr } for pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.400:100): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=12977 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.402:101): avc: denied { getattr } for pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.402:101): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=1 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.402:102): avc: denied { search } for pid=12978 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.402:102): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d26 items=0 ppid=1 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.402:103): avc: denied { getattr } for pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.402:103): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=1 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.450:104): avc: denied { search } for pid=12981 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.450:104): arch=c000003e syscall=4 success=no exit=-13 a0=619310 a1=7fff10cbf820 a2=7fff10cbf820 a3=61931b items=0 ppid=12978 pid=12981 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201630980.450:105): avc: denied { search } for pid=12981 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201630980.450:105): arch=c000003e syscall=2 success=no exit=-13 a0=619310 a1=0 a2=0 a3=61931b items=0 ppid=12978 pid=12981 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_START msg=audit(1201630980.733:106): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201630980.733:107): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201630997.319:108): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201630997.319:109): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201630997.351:110): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201630997.351:111): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201630998.417:112): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201630998.418:113): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1201631267.016:114): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201631267.016:115): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1201631598.499:116): avc: denied { getattr } for pid=15481 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631598.499:116): arch=c000003e syscall=6 success=no exit=-13 a0=60446b a1=7fff31b704d0 a2=7fff31b704d0 a3=3688b22902 items=0 ppid=15479 pid=15481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201631598.567:117): avc: denied { getattr } for pid=15481 comm="tmpwatch" path="/tmp/pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631598.567:117): arch=c000003e syscall=6 success=no exit=-13 a0=6045db a1=7fff31b704d0 a2=7fff31b704d0 a3=3688b22902 items=0 ppid=15479 pid=15481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1201631599.238:118): avc: denied { getattr } for pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.238:118): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.238:119): avc: denied { search } for pid=15523 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.238:119): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d2b items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.239:120): avc: denied { getattr } for pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.239:120): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.239:121): avc: denied { getattr } for pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.239:121): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.239:122): avc: denied { search } for pid=15523 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.239:122): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d26 items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.239:123): avc: denied { getattr } for pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.239:123): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.277:124): avc: denied { search } for pid=15524 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.277:124): arch=c000003e syscall=4 success=no exit=-13 a0=619310 a1=7fff766be220 a2=7fff766be220 a3=61931b items=0 ppid=15523 pid=15524 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=AVC msg=audit(1201631599.277:125): avc: denied { search } for pid=15524 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=SYSCALL msg=audit(1201631599.277:125): arch=c000003e syscall=2 success=no exit=-13 a0=619310 a1=0 a2=0 a3=61931b items=0 ppid=15523 pid=15524 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null) >type=USER_ACCT msg=audit(1201633261.148:126): user pid=16898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201633261.149:127): user pid=16898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201633261.149:128): login pid=16898 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201633261.187:129): user pid=16898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201633261.273:130): user pid=16898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201633261.274:131): user pid=16898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1201636861.299:132): user pid=22619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201636861.300:133): user pid=22619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201636861.300:134): login pid=22619 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201636861.313:135): user pid=22619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201636861.335:136): user pid=22619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201636861.336:137): user pid=22619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201637368.485:138): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201637368.488:139): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201637368.519:140): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201637368.532:141): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1201637425.413:142): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201637425.413:143): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201640461.349:144): user pid=3823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201640461.351:145): user pid=3823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201640461.351:146): login pid=3823 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201640461.366:147): user pid=3823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201640461.398:148): user pid=3823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201640461.399:149): user pid=3823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201641080.829:150): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1201641080.831:151): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1201641080.839:152): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1201641080.839:153): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1201642068.479:154): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201642068.482:155): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201642068.488:156): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201642068.488:157): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201642097.756:158): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201642097.757:159): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201642258.662:160): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201642258.664:161): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201642258.671:162): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201642258.671:163): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201642388.455:164): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201642388.456:165): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201643095.374:166): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201643095.377:167): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201643095.382:168): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201643095.382:169): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201643260.743:170): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201643260.744:171): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201643680.301:172): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201643680.301:173): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201643680.348:174): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AVC msg=audit(1201643953.746:175): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201643953.037:176): policy loaded auid=500 >type=SYSCALL msg=audit(1201643953.037:176): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16075 pid=16099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201644013.309:177): user pid=16256 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AVC msg=audit(1201644021.861:178): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201644021.323:179): policy loaded auid=500 >type=SYSCALL msg=audit(1201644021.323:179): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16257 pid=16264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201644022.283:180): user pid=16257 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1201644032.659:181): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201644031.906:182): policy loaded auid=500 >type=SYSCALL msg=audit(1201644031.906:182): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16267 pid=16277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201644033.094:183): user pid=16267 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)' >type=USER_ROLE_CHANGE msg=audit(1201644034.354:184): user pid=16280 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AVC msg=audit(1201644043.582:185): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201644042.825:186): policy loaded auid=500 >type=SYSCALL msg=audit(1201644042.825:186): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16281 pid=16305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201644044.006:187): user pid=16281 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1201644054.358:188): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201644053.633:189): policy loaded auid=500 >type=SYSCALL msg=audit(1201644053.633:189): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16307 pid=16316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1201644054.818:190): user pid=16307 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1201644061.569:191): user pid=16326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201644061.571:192): user pid=16326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201644061.571:193): login pid=16326 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201644061.660:194): user pid=16326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201644061.837:195): user pid=16326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201644061.838:196): user pid=16326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201644205.088:197): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201644250.082:198): user pid=16689 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201644250.082:199): user pid=16689 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201644250.987:200): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201644250.987:201): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1201644250.987:202): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201644251.075:203): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201644251.075:204): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201644251.090:205): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201644251.091:206): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1201644251.188:207): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1201644260.027:1764): auditd normal halt, sending auid=4294967295 pid=17100 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201712017.489:2442): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2065 res=success >type=CONFIG_CHANGE msg=audit(1201712017.588:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201712017.588:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201712017.928:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201712017.928:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201712018.769:8): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201712018.769:9): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201712020.766:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201712020.766:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201712049.328:12): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201712049.354:13): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201712049.997:14): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201712050.116:15): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1201712084.367:16): avc: granted { execheap } for pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712084.367:16): arch=c000003e syscall=10 success=yes exit=0 a0=f0a000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201712125.048:17): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201712125.051:18): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201712125.052:19): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201712125.052:20): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201712125.052:21): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201712198.235:22): avc: granted { execheap } for pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712198.235:22): arch=c000003e syscall=10 success=yes exit=0 a0=1055000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712198.327:23): avc: granted { execheap } for pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712198.327:23): arch=c000003e syscall=10 success=yes exit=0 a0=100f000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712198.625:24): avc: granted { execheap } for pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712198.625:24): arch=c000003e syscall=10 success=yes exit=0 a0=10a0000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712198.626:25): avc: granted { execheap } for pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712198.626:25): arch=c000003e syscall=10 success=yes exit=0 a0=1096000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712258.627:26): avc: granted { execheap } for pid=4084 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712258.627:26): arch=c000003e syscall=10 success=yes exit=0 a0=10aa000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4084 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712258.944:27): avc: granted { execheap } for pid=4088 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712258.944:27): arch=c000003e syscall=10 success=yes exit=0 a0=10b5000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4088 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712258.946:28): avc: granted { execheap } for pid=4089 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712258.946:28): arch=c000003e syscall=10 success=yes exit=0 a0=10a3000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4089 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712258.947:29): avc: granted { execheap } for pid=4087 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712258.947:29): arch=c000003e syscall=10 success=yes exit=0 a0=10ab000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4087 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712258.951:30): avc: granted { execheap } for pid=4094 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712258.951:30): arch=c000003e syscall=10 success=yes exit=0 a0=10fd000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=4094 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712258.953:31): avc: granted { execheap } for pid=4095 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712258.953:31): arch=c000003e syscall=10 success=yes exit=0 a0=10ea000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=4095 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201712259.098:32): avc: granted { execheap } for pid=4090 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201712259.098:32): arch=c000003e syscall=10 success=yes exit=0 a0=10c0000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=4090 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1201712461.239:33): user pid=5800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201712461.240:34): user pid=5800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201712461.240:35): login pid=5800 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201712461.265:36): user pid=5800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201712461.384:37): user pid=5800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201712461.385:38): user pid=5800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201713425.990:39): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201713425.993:40): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201713425.994:41): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201713425.995:42): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201713425.995:43): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201713425.996:44): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/selinux-policy/F-8/noarch" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201713488.230:45): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201713488.231:46): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201713488.231:47): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201713488.231:48): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/selinux-policy/F-8/noarch" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=AVC msg=audit(1201713561.487:49): avc: denied { read write } for pid=12272 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201713561.487:49): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfb0 a1=2aaab2a3d100 a2=0 a3=0 items=0 ppid=12251 pid=12272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201713562.058:50): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201713561.641:51): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201713561.641:51): arch=c000003e syscall=1 success=yes exit=4091106 a0=4 a1=2aaaab87a000 a2=3e6ce2 a3=0 items=0 ppid=12251 pid=12272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1201713571.909:52): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201713571.912:53): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201713571.935:54): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201713571.935:55): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201713624.333:56): avc: denied { search } for pid=12503 comm="setsebool" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=AVC msg=audit(1201713624.333:56): avc: denied { search } for pid=12503 comm="setsebool" name="db2inst" dev=dm-1 ino=4259844 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201713624.333:56): avc: denied { search } for pid=12503 comm="setsebool" name="sqllib" dev=dm-1 ino=4259854 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=dir >type=AVC msg=audit(1201713624.333:56): avc: denied { read } for pid=12503 comm="setsebool" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201713624.333:56): arch=c000003e syscall=2 success=no exit=-2 a0=7fff138822e0 a1=0 a2=2aaaaacca000 a3=0 items=0 ppid=12327 pid=12503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=MAC_CONFIG_CHANGE msg=audit(1201713632.099:57): bool=allow_execheap val=0 old_val=1 auid=4294967295 >type=SYSCALL msg=audit(1201713632.099:57): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff1387bb00 a2=2 a3=2aaaab116082 items=0 ppid=12327 pid=12503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201713632.103:58): avc: denied { search } for pid=12503 comm="setsebool" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir >type=AVC msg=audit(1201713632.103:58): avc: denied { search } for pid=12503 comm="setsebool" name="db2inst" dev=dm-1 ino=4259844 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0 tclass=dir >type=AVC msg=audit(1201713632.103:58): avc: denied { search } for pid=12503 comm="setsebool" name="sqllib" dev=dm-1 ino=4259854 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=dir >type=AVC msg=audit(1201713632.103:58): avc: denied { read } for pid=12503 comm="setsebool" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201713632.103:58): arch=c000003e syscall=2 success=no exit=-2 a0=7fff13881ee0 a1=0 a2=2aaaaacca000 a3=0 items=0 ppid=12327 pid=12503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201713632.104:59): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1201713686.527:60): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201713686.527:61): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201713687.174:62): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201713687.175:63): avc: denied { signal } for pid=2781 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201713687.175:63): arch=c000003e syscall=62 success=yes exit=0 a0=b29 a1=f a2=b29 a3=0 items=0 ppid=1 pid=2781 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201713687.175:64): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201713687.234:65): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201713687.236:66): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1201713694.736:2443): auditd normal halt, sending auid=4294967295 pid=13016 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201713776.509:2187): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2067 res=success >type=CONFIG_CHANGE msg=audit(1201713776.608:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201713776.608:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201713777.114:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201713777.114:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201713778.253:8): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201713778.253:9): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201713780.060:10): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201713780.060:11): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201713824.220:12): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201713824.238:13): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201713824.333:14): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201713824.439:15): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1201713992.996:16): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201713992.999:17): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201713993.001:18): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201713993.001:19): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201713993.001:20): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201713999.610:21): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201713999.612:22): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201713999.636:23): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201713999.636:24): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201714057.825:25): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201714057.826:26): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201714062.441:27): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201714062.443:28): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201714062.470:29): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201714062.471:30): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201714128.148:31): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201714128.149:32): avc: denied { read write } for pid=4889 comm="unix_update" name="2" dev=devpts ino=4 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201714128.149:32): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaafba3238 a1=7fffc0143c20 a2=2aaaafda4f50 a3=3688d529f0 items=0 ppid=4885 pid=4889 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts2 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1201714128.151:33): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201714128.153:34): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201714128.153:35): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1201714132.798:36): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201714132.799:37): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201714136.113:38): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201714136.116:39): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201714136.157:40): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201714136.157:41): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1201715463.803:42): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201715463.804:43): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1201715470.294:44): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1201715470.295:45): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201715470.312:46): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201715484.456:47): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201715674.454:48): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1201715674.456:49): avc: denied { read write } for pid=6898 comm="unix_update" name="2" dev=devpts ino=4 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201715674.456:49): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaafba3238 a1=7fff4dbbc680 a2=2aaaafda4f50 a3=3688d529f0 items=0 ppid=6893 pid=6898 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts2 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1201715674.458:50): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1201715674.475:51): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1201715674.475:52): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1201715887.182:53): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201715887.183:54): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201716061.348:55): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201716061.349:56): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201716061.349:57): login pid=7404 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201716061.362:58): user pid=7404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201716061.477:59): user pid=7404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201716061.478:60): user pid=7404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201716086.249:61): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201716086.252:62): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201716086.266:63): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201716086.266:64): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201716097.452:65): avc: denied { read } for pid=7587 comm="restorecon" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201716097.452:65): arch=c000003e syscall=2 success=no exit=-2 a0=7ffffb7a8070 a1=0 a2=2aaaaaccc000 a3=0 items=0 ppid=7450 pid=7587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1201716119.007:66): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201716119.008:67): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201716630.617:68): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201716630.620:69): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201716630.622:70): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201716630.622:71): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201716630.622:72): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201717387.479:73): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201717387.481:74): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201717387.487:75): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201717387.488:76): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201717479.227:77): avc: denied { read write } for pid=18272 comm="load_policy" name="tty1" dev=tmpfs ino=2602 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1201717479.227:77): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfb0 a1=2aaab2a047e0 a2=0 a3=0 items=0 ppid=18245 pid=18272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1201717479.793:78): user pid=2107 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1201717479.372:79): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1201717479.372:79): arch=c000003e syscall=1 success=yes exit=4091130 a0=4 a1=2aaaab87a000 a2=3e6cfa a3=0 items=0 ppid=18245 pid=18272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201717480.337:80): avc: denied { read } for pid=18304 comm="restorecon" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1201717480.337:80): arch=c000003e syscall=2 success=no exit=-2 a0=7fff09bd2520 a1=0 a2=2aaaaaccc000 a3=0 items=0 ppid=18276 pid=18304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1201717646.232:81): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201717646.233:82): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201718580.604:83): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201718580.605:84): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1201718598.530:85): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201718598.531:86): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201718599.039:87): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201718599.040:88): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201718599.041:89): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1201718599.042:90): avc: denied { signal } for pid=2791 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201718599.042:90): arch=c000003e syscall=62 success=yes exit=0 a0=b2d a1=f a2=b2d a3=0 items=0 ppid=1 pid=2791 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201718599.042:91): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1201718606.719:2188): auditd normal halt, sending auid=4294967295 pid=19785 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201718687.025:9230): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2068 res=success >type=CONFIG_CHANGE msg=audit(1201718687.125:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201718687.125:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201718687.712:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201718687.713:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201718688.654:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1201718688.654:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1201718690.460:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1201718690.460:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1201718792.893:12): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1201718792.911:13): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1201718792.998:14): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1201718793.106:15): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1201719235.508:16): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201719235.510:17): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201719235.512:18): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201719235.512:19): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201719235.512:20): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201719294.767:21): user pid=4279 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201719300.749:22): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201719300.752:23): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201719300.770:24): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201719300.771:25): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201719344.756:26): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201719344.757:27): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201719490.381:28): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201719490.384:29): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201719490.390:30): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201719490.390:31): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201719661.616:32): user pid=5519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201719661.617:33): user pid=5519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201719661.617:34): login pid=5519 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201719661.624:35): user pid=5519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201719661.736:36): user pid=5519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201719661.737:37): user pid=5519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1201720493.978:38): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201720493.981:39): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201720493.982:40): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201720493.982:41): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201720493.982:42): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201721059.363:43): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201721059.364:44): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201722141.090:45): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201722141.091:46): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1201722141.583:47): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201722141.584:48): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201722141.585:49): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201722141.586:50): avc: denied { signal } for pid=2789 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1201722141.586:50): arch=c000003e syscall=62 success=yes exit=0 a0=b79 a1=f a2=b79 a3=0 items=0 ppid=1 pid=2789 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201722141.586:51): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1201722149.456:9231): auditd normal halt, sending auid=4294967295 pid=10473 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201724916.060:4496): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2072 res=success >type=CONFIG_CHANGE msg=audit(1201724916.160:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201724916.160:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201724916.657:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201724916.657:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201724917.780:8): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201724917.781:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201724919.495:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201724919.496:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201724940.469:12): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201724940.487:13): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201724940.523:14): avc: denied { create } for pid=2768 comm="ssh-agent" name="agent.2768" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201724940.523:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2b55bdc0 a2=6e a3=0 items=0 ppid=2660 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201724940.537:15): avc: denied { write } for pid=2660 comm="login" name="agent.2768" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201724940.537:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff10869bf0 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201724940.537:16): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201724940.549:17): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201724940.562:18): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201724954.958:19): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201724954.960:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201724954.961:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201724954.963:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201724954.963:23): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201724954.963:24): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201725005.343:25): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201725005.344:26): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201725005.344:27): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201725005.345:28): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201725006.151:29): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201725006.151:30): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201725006.229:31): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201725006.230:32): avc: denied { unlink } for pid=2769 comm="ssh-agent" name="agent.2768" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201725006.230:32): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2b55b5d0 a2=7fff2b55b4a0 a3=0 items=0 ppid=1 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201725006.230:33): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1201725012.767:4497): auditd normal halt, sending auid=4294967295 pid=3422 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1201799949.903:2691): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2069 res=success >type=CONFIG_CHANGE msg=audit(1201799950.002:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201799950.002:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1201799950.574:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1201799950.574:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1201799951.556:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1201799951.556:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1201799953.271:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1201799953.272:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1201800093.245:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201800093.263:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201800093.299:14): avc: denied { create } for pid=2862 comm="ssh-agent" name="agent.2862" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201800093.299:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2677f620 a2=6e a3=0 items=0 ppid=2657 pid=2862 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1201800093.312:15): avc: denied { write } for pid=2657 comm="login" name="agent.2862" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201800093.312:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff3d6bba40 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1201800093.313:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201800093.325:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1201800093.338:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201800102.552:19): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201800102.555:20): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201800102.556:21): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201800102.557:22): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201800102.557:23): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201800102.558:24): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201802017.763:25): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201802017.766:26): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201802017.768:27): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201802017.768:28): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1201802017.768:29): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1201802461.028:30): user pid=7957 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1201802461.031:31): user pid=7957 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201802461.037:32): user pid=7957 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="yum-builddeps" (terminal=tty2 res=failed)' >type=USER_ACCT msg=audit(1201802461.906:33): user pid=7961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201802461.907:34): user pid=7961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1201802461.908:35): login pid=7961 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1201802461.925:36): user pid=7961 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1201802462.062:37): user pid=7961 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1201802462.063:38): user pid=7961 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1201802468.912:39): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201802468.913:40): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201802468.913:41): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201802468.913:42): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1201802501.519:43): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1201802501.520:44): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1201802501.520:45): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1201802501.520:46): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)' >type=USER_START msg=audit(1201805540.002:47): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201805540.002:48): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1201805546.697:49): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1201805546.698:50): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1201805546.733:51): user pid=11325 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1201805546.733:52): user pid=11325 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1201805621.864:53): user pid=11442 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201805621.864:54): user pid=11442 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201805621.864:55): user pid=11442 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1201805628.670:56): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201805628.673:57): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1201805628.673:58): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1201805628.675:59): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201805628.675:60): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1201805628.675:61): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/selinux-policy/F-8/serefpolicy-3.0.8/policy/modules/services" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1201805628.683:62): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1201805628.683:63): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1201805630.614:64): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1201805630.614:65): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1201805630.615:66): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1201805630.615:67): avc: denied { unlink } for pid=2863 comm="ssh-agent" name="agent.2862" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1201805630.615:67): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2677ee30 a2=7fff2677ed00 a3=0 items=0 ppid=1 pid=2863 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1201805630.615:68): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1201805637.558:2692): auditd normal halt, sending auid=4294967295 pid=11854 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202672103.263:6224): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2069 res=success >type=CONFIG_CHANGE msg=audit(1202672103.362:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202672103.362:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202672103.950:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202672103.950:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202672104.875:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1202672104.875:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1202672106.689:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1202672106.690:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1202672126.950:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202672126.968:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202672127.012:14): avc: denied { create } for pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202672127.012:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff79fbb5b0 a2=6e a3=0 items=0 ppid=2657 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202672127.025:15): avc: denied { write } for pid=2657 comm="login" name="agent.2766" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202672127.025:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffc11604e0 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1202672127.025:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202672127.038:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1202672127.051:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202672136.100:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202672136.103:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202672136.104:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202672136.105:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1202672136.105:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1202672136.105:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202672192.564:25): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1202672192.568:26): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1202672192.569:27): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1202672192.569:28): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1202672192.569:29): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1202672764.581:30): avc: denied { read write } for pid=4650 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202672764.581:30): arch=c000003e syscall=59 success=yes exit=0 a0=6c7f90 a1=6c6280 a2=6c5fd0 a3=0 items=0 ppid=4647 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202672764.623:31): avc: denied { ioctl } for pid=4650 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202672764.623:31): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff1a5105e0 a3=2aaaaf551412 items=0 ppid=4647 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202672764.623:32): avc: denied { getattr } for pid=4650 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202672764.623:32): arch=c000003e syscall=6 success=yes exit=0 a0=7fff1a514c80 a1=7fff1a5107f0 a2=7fff1a5107f0 a3=2aaaaf551412 items=0 ppid=4647 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1202672764.623:33): user pid=4650 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1202672764.624:34): avc: denied { read write } for pid=4653 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202672764.624:34): arch=c000003e syscall=59 success=yes exit=0 a0=6c8c20 a1=6c6870 a2=6c5fd0 a3=0 items=0 ppid=4647 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202672764.665:35): avc: denied { ioctl } for pid=4653 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202672764.665:35): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffc3e8dcb0 a3=2aaaaf5d2d32 items=0 ppid=4647 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202672764.665:36): avc: denied { getattr } for pid=4653 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202672764.665:36): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc3e92350 a1=7fffc3e8dec0 a2=7fffc3e8dec0 a3=2aaaaf5d2d32 items=0 ppid=4647 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1202672764.665:37): user pid=4653 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1202673132.907:38): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202673132.926:39): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202673133.074:40): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202673133.087:41): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1202673147.493:42): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1202673147.494:43): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202673154.919:44): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202673154.922:45): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202673154.928:46): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202673154.928:47): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202673305.871:48): user pid=13584 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202673305.871:49): user pid=13584 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1202673306.054:50): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1202673306.054:51): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1202673306.055:52): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1202673306.056:53): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202673306.057:54): avc: denied { unlink } for pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=CRED_DISP msg=audit(1202673306.062:55): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1202673306.064:56): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=SYSCALL msg=audit(1202673306.057:54): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff79fbadc0 a2=7fff79fbac90 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1202673314.540:6225): auditd normal halt, sending auid=4294967295 pid=13987 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202673399.290:8738): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-115.fc8 auid=4294967295 pid=2060 res=success >type=CONFIG_CHANGE msg=audit(1202673399.390:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202673399.390:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202673399.712:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202673399.712:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202673400.844:8): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1202673400.844:9): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1202673402.435:10): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1202673402.435:11): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1202673433.269:12): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202673433.287:13): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1202673433.390:14): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1202673433.524:15): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1202673469.151:16): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202673469.154:17): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202673470.486:18): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202673470.486:19): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1202673470.486:20): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202673661.066:21): user pid=3987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1202673661.068:22): user pid=3987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1202673661.068:23): login pid=3987 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1202673661.083:24): user pid=3987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1202673661.203:25): user pid=3987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202673661.204:26): user pid=3987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1202674042.608:27): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1202674042.612:28): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1202674042.613:29): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1202674042.614:30): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1202674042.614:31): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_CMD msg=audit(1202674042.614:32): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='cwd="/usr/bin" cmd="/usr/bin/yum" (terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1202677261.218:33): user pid=30126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1202677261.219:34): user pid=30126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1202677261.219:35): login pid=30126 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1202677261.235:36): user pid=30126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1202677261.261:37): user pid=30126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202677261.262:38): user pid=30126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1202677309.744:39): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1202677309.763:40): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1202677316.065:41): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1202677316.065:42): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1202677321.218:43): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1202677321.221:44): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1202677321.223:45): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1202677321.223:46): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1202677321.223:47): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1202677343.222:48): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1202677343.225:49): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1202677343.239:50): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1202677343.240:51): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1202677360.241:52): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1202677360.242:53): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1202678990.664:54): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1202678990.664:55): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1202679004.121:56): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1202679004.122:57): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1202679004.153:58): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1202679004.153:59): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1202679252.412:60): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1202679252.413:61): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1202679766.448:62): avc: denied { getattr } for pid=15850 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202679766.448:62): arch=c000003e syscall=6 success=yes exit=0 a0=60442b a1=7fff4f30ac70 a2=7fff4f30ac70 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202679766.448:63): avc: denied { search } for pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202679766.448:63): arch=c000003e syscall=80 success=yes exit=0 a0=60442b a1=7fff4f30a970 a2=0 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202679766.448:64): avc: denied { read } for pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202679766.448:64): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202679766.457:65): avc: denied { getattr } for pid=15850 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=1470265 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202679766.457:65): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff4f30aae0 a2=7fff4f30aae0 a3=3688d529f0 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202679766.457:66): avc: denied { setattr } for pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202679766.457:66): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff4f30ab70 a2=3688d529d8 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202679766.457:67): avc: denied { rmdir } for pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202679766.457:67): arch=c000003e syscall=84 success=no exit=-39 a0=60442b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202679766.582:68): avc: denied { getattr } for pid=15850 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1202679766.582:68): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff4f30aae0 a2=7fff4f30aae0 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_END msg=audit(1202680313.910:69): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202680313.924:70): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202680314.895:71): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1202680314.896:72): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1202680314.897:73): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202680314.897:74): avc: denied { signal } for pid=2634 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1202680314.897:74): arch=c000003e syscall=62 success=yes exit=0 a0=a92 a1=f a2=a92 a3=0 items=0 ppid=1 pid=2634 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1202680314.898:75): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1202680318.917:8739): auditd normal halt, sending auid=4294967295 pid=16947 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202744628.132:6717): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-115.fc8 auid=4294967295 pid=2065 res=success >type=CONFIG_CHANGE msg=audit(1202744628.232:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202744628.232:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202744628.496:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202744628.496:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202744629.247:8): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1202744629.247:9): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1202744631.271:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1202744631.271:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1202744659.383:12): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202744659.401:13): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1202744659.496:14): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1202744659.633:15): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1202744684.368:16): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202744684.371:17): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202744684.373:18): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202744684.373:19): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1202744684.373:20): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202745661.934:21): user pid=5117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1202745661.936:22): user pid=5117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1202745661.936:23): login pid=5117 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1202745661.950:24): user pid=5117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1202745662.071:25): user pid=5117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202745662.072:26): user pid=5117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202747168.881:27): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202747168.882:28): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202747169.392:29): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202747169.393:30): avc: denied { signal } for pid=2627 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1202747169.393:30): arch=c000003e syscall=62 success=yes exit=0 a0=a90 a1=f a2=a90 a3=0 items=0 ppid=1 pid=2627 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1202747169.393:31): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1202747172.768:6718): auditd normal halt, sending auid=4294967295 pid=6585 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202839726.623:9438): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-115.fc8 auid=4294967295 pid=2066 res=success >type=CONFIG_CHANGE msg=audit(1202839726.723:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202839726.723:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202839726.928:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202839726.928:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202839727.661:8): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1202839727.661:9): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1202839729.617:10): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1202839729.617:11): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1202839868.531:12): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1202839874.925:13): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1202839879.982:14): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202839879.992:15): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1202839880.087:16): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1202839880.224:17): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1202840307.710:18): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)' >type=USER_AUTH msg=audit(1202840311.197:19): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1202840311.200:20): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1202840311.200:21): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1202840311.201:22): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1202840311.201:23): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_CMD msg=audit(1202840311.202:24): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/2 res=success)' >type=AVC msg=audit(1202840645.571:25): avc: denied { transition } for pid=4659 comm="yum" path="/bin/bash" dev=dm-0 ino=197778 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1202840645.571:25): arch=c000003e syscall=59 success=yes exit=0 a0=127445d7 a1=7fffb3180580 a2=9679360 a3=3f51813bb2 items=0 ppid=3924 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202840697.038:26): avc: denied { transition } for pid=7418 comm="yum" path="/bin/bash" dev=dm-0 ino=197778 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1202840697.038:26): arch=c000003e syscall=59 success=yes exit=0 a0=11a996bb a1=7fffb3180580 a2=9679360 a3=3f51813bb2 items=0 ppid=3924 pid=7418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1202840872.530:27): user pid=2626 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202840872.533:28): user pid=2626 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202840872.537:29): avc: denied { create } for pid=10308 comm="ssh-agent" name="agent.10308" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202840872.537:29): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffd4c4d940 a2=6e a3=0 items=0 ppid=2626 pid=10308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202840872.538:30): avc: denied { write } for pid=2626 comm="login" name="agent.10308" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202840872.538:30): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff2c45c7e0 a2=6e a3=0 items=0 ppid=1 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1202840872.539:31): login pid=2626 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1202840872.547:32): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202840872.550:33): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202840872.550:34): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1202840872.551:35): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1202840970.439:36): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202840970.440:37): avc: denied { unlink } for pid=10309 comm="ssh-agent" name="agent.10308" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202840970.440:37): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffd4c4d150 a2=7fffd4c4d020 a3=0 items=0 ppid=1 pid=10309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1202840970.441:38): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202841169.236:39): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1202841169.239:40): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1202841169.283:41): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1202841169.283:42): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1202841177.652:43): avc: denied { read write } for pid=11099 comm="mount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202841177.652:43): arch=c000003e syscall=59 success=yes exit=0 a0=a39940 a1=a11a70 a2=a353f0 a3=8 items=0 ppid=10750 pid=11099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1202841230.484:44): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1202841230.485:45): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1202841704.857:46): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202841704.857:47): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1202841708.671:9439): auditd normal halt, sending auid=4294967295 pid=11897 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202842746.091:7590): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2054 res=success >type=CONFIG_CHANGE msg=audit(1202842746.190:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202842746.190:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202842746.447:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202842746.447:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202842747.155:8): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1202842747.155:9): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1202842749.202:10): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1202842749.202:11): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1202842776.620:12): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202842776.638:13): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1202842776.733:14): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1202842776.866:15): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202842861.900:16): user pid=3529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1202842861.901:17): user pid=3529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1202842861.901:18): login pid=3529 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1202842861.916:19): user pid=3529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1202842862.063:20): user pid=3529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202842862.064:21): user pid=3529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1202842994.549:22): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1202842994.552:23): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1202842994.553:24): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1202842994.554:25): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1202842994.554:26): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_CMD msg=audit(1202842994.555:27): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/mount" (terminal=pts/2 res=success)' >type=AVC msg=audit(1202842994.555:28): avc: denied { read write } for pid=3683 comm="mount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202842994.555:28): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacff850 a1=7fff0e066050 a2=2aaaaacfa990 a3=0 items=0 ppid=3084 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1202843560.002:29): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202843560.002:30): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1202843563.723:7591): auditd normal halt, sending auid=4294967295 pid=4613 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202923140.975:8451): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2052 res=success >type=CONFIG_CHANGE msg=audit(1202923141.075:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202923141.075:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202923141.339:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202923141.339:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202923142.081:8): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1202923142.082:9): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1202923144.286:10): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1202923144.286:11): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1202923174.581:12): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202923174.599:13): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1202923174.694:14): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1202923174.837:15): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1202923207.220:16): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202923207.226:17): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202923207.227:18): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202923207.228:19): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1202923207.228:20): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202923216.727:21): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202923216.730:22): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202923216.731:23): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202923216.732:24): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1202923216.732:25): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1202923216.732:26): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202923300.980:27): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202923300.981:28): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1202923300.981:29): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1202923300.982:30): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202925661.801:31): user pid=5897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1202925661.802:32): user pid=5897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1202925661.802:33): login pid=5897 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1202925661.816:34): user pid=5897 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1202925661.939:35): user pid=5897 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202925661.940:36): user pid=5897 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1202928732.858:37): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1202928732.858:38): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1202928739.708:39): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1202928739.709:40): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1202928739.737:41): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1202928739.737:42): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1202929004.014:43): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1202929004.014:44): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1202929174.108:45): avc: denied { getattr } for pid=10192 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202929174.108:45): arch=c000003e syscall=6 success=yes exit=0 a0=6043c3 a1=7fffdea24380 a2=7fffdea24380 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202929174.109:46): avc: denied { search } for pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202929174.109:46): arch=c000003e syscall=80 success=yes exit=0 a0=6043c3 a1=7fffdea24080 a2=0 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202929174.109:47): avc: denied { read } for pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202929174.109:47): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202929174.117:48): avc: denied { getattr } for pid=10192 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1202929174.117:48): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffdea241f0 a2=7fffdea241f0 a3=3688d529f0 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202929174.117:49): avc: denied { setattr } for pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202929174.117:49): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffdea24280 a2=3688d529d8 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202929174.118:50): avc: denied { rmdir } for pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1202929174.118:50): arch=c000003e syscall=84 success=no exit=-39 a0=6043c3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1202929174.171:51): avc: denied { getattr } for pid=10192 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1202929174.171:51): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffdea241f0 a2=7fffdea241f0 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1202929261.973:52): user pid=10315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1202929261.975:53): user pid=10315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1202929261.975:54): login pid=10315 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1202929261.990:55): user pid=10315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1202929262.019:56): user pid=10315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202929262.020:57): user pid=10315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1202929740.996:58): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202929740.996:59): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202929741.800:60): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1202929741.801:61): avc: denied { signal } for pid=2614 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1202929741.801:61): arch=c000003e syscall=62 success=yes exit=0 a0=a81 a1=f a2=a81 a3=0 items=0 ppid=1 pid=2614 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1202929741.801:62): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1202929745.436:8452): auditd normal halt, sending auid=4294967295 pid=11014 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1202937051.083:4254): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2058 res=success >type=CONFIG_CHANGE msg=audit(1202937051.183:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202937051.183:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1202937051.596:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1202937051.596:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1202937052.380:8): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1202937052.380:9): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1202937054.452:10): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1202937054.452:11): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1202937107.437:12): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1202937111.974:13): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1202937111.982:14): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1202937112.068:15): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1202937112.210:16): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1202937154.171:17): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1202937154.374:18): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1202937160.689:19): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1202937160.689:20): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1202937172.242:21): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1202937172.246:22): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1202937172.290:23): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1202937172.290:24): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=AVC msg=audit(1202937193.067:25): avc: denied { read write } for pid=3973 comm="umount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202937193.067:25): arch=c000003e syscall=59 success=yes exit=0 a0=92dfc0 a1=92d630 a2=8f0890 a3=8 items=0 ppid=3972 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1202937294.333:26): avc: denied { read write } for pid=5166 comm="mount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1202937294.333:26): arch=c000003e syscall=59 success=yes exit=0 a0=92c470 a1=8cccd0 a2=8fe2b0 a3=8 items=0 ppid=5152 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1202937327.861:27): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1202937327.862:28): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1202937401.307:29): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1202937401.310:30): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1202937401.312:31): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1202937401.312:32): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1202937401.312:33): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1202937610.587:34): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1202937610.590:35): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1202937610.591:36): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1202937610.591:37): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1202937610.591:38): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1202938953.076:39): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202938953.076:40): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1202938953.610:41): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1202938953.610:42): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1202938953.611:43): avc: denied { signal } for pid=4115 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=USER_END msg=audit(1202938953.611:44): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=SYSCALL msg=audit(1202938953.611:43): arch=c000003e syscall=62 success=yes exit=0 a0=a8a a1=f a2=a8a a3=0 items=0 ppid=1 pid=4115 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1202938953.611:45): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1202938961.354:4255): auditd normal halt, sending auid=4294967295 pid=8262 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203003372.323:8207): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2099 res=success >type=CONFIG_CHANGE msg=audit(1203003372.423:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203003372.423:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203003372.870:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203003372.870:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203003373.861:8): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1203003373.861:9): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1203003375.783:10): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1203003375.783:11): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1203003442.184:12): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1203003442.203:13): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1203003442.306:14): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1203003442.447:15): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1203003453.388:16): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203003453.391:17): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203003453.392:18): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203003453.392:19): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203003453.393:20): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203003464.731:21): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1203003469.096:22): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203003469.099:23): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203003469.099:24): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203003469.101:25): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203003469.101:26): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203003469.101:27): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203003798.090:28): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203003798.093:29): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203003798.095:30): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203003798.095:31): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203003798.095:32): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1203004150.628:33): avc: denied { read write } for pid=4991 comm="useradd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004150.628:33): arch=c000003e syscall=59 success=yes exit=0 a0=8cb0f0 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=4990 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203004150.694:34): avc: denied { ioctl } for pid=4991 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004150.694:34): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff72117f00 a3=2aaaaf5d2d32 items=0 ppid=4990 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203004150.694:35): avc: denied { getattr } for pid=4991 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004150.694:35): arch=c000003e syscall=6 success=yes exit=0 a0=7fff7211c5a0 a1=7fff72118110 a2=7fff72118110 a3=2aaaaf5d2d32 items=0 ppid=4990 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203004150.694:36): user pid=4991 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=ldap exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_START msg=audit(1203004154.062:37): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203004154.062:38): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203004154.087:39): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203004154.087:40): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1203004178.513:41): avc: denied { read write } for pid=5176 comm="groupadd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004178.513:41): arch=c000003e syscall=59 success=yes exit=0 a0=8c9cb0 a1=8c7f70 a2=8c7fd0 a3=3688d529f0 items=0 ppid=5175 pid=5176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203004178.560:42): user pid=5176 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=gnokii exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1203004193.368:43): avc: denied { read write } for pid=5201 comm="groupadd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004193.368:43): arch=c000003e syscall=59 success=yes exit=0 a0=8c9f90 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=5200 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203004193.370:44): avc: denied { ioctl } for pid=5201 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004193.370:44): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffab36a4d0 a3=2aaaaf551412 items=0 ppid=5200 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203004193.370:45): avc: denied { getattr } for pid=5201 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004193.370:45): arch=c000003e syscall=6 success=yes exit=0 a0=7fffab36eb70 a1=7fffab36a6e0 a2=7fffab36a6e0 a3=2aaaaf551412 items=0 ppid=5200 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203004193.370:46): user pid=5201 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1203004193.371:47): avc: denied { read write } for pid=5202 comm="useradd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004193.371:47): arch=c000003e syscall=59 success=yes exit=0 a0=8cac20 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=5200 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203004193.374:48): avc: denied { ioctl } for pid=5202 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004193.374:48): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff61658720 a3=2aaaaf5d2d32 items=0 ppid=5200 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203004193.374:49): avc: denied { getattr } for pid=5202 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004193.374:49): arch=c000003e syscall=6 success=yes exit=0 a0=7fff6165cdc0 a1=7fff61658930 a2=7fff61658930 a3=2aaaaf5d2d32 items=0 ppid=5200 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203004193.374:50): user pid=5202 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_CHAUTHTOK msg=audit(1203004196.478:51): user pid=5684 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1203004196.505:52): user pid=5685 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1203004506.353:53): avc: denied { read write } for pid=8866 comm="groupadd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203004506.353:53): arch=c000003e syscall=59 success=yes exit=0 a0=8c9cb0 a1=8c7f70 a2=8c7fd0 a3=3688d529f0 items=0 ppid=8865 pid=8866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203004506.355:54): user pid=8866 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=gnokii exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_START msg=audit(1203004742.550:55): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203004742.550:56): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203004742.778:57): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203004742.778:58): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1203004861.404:59): user pid=9663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203004861.405:60): user pid=9663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203004861.405:61): login pid=9663 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203004861.466:62): user pid=9663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203004861.644:63): user pid=9663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203004861.645:64): user pid=9663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203007831.754:65): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_LOGIN msg=audit(1203007831.767:66): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_AUTH msg=audit(1203007835.367:67): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203007835.370:68): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203007835.387:69): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203007835.400:70): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1203007835.415:71): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203008461.658:72): user pid=2794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203008461.659:73): user pid=2794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203008461.659:74): login pid=2794 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203008461.673:75): user pid=2794 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203008461.695:76): user pid=2794 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203008461.698:77): user pid=2794 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1203008966.586:78): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203008966.586:79): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203008986.260:80): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203008986.260:81): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1203008986.289:82): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203008986.289:83): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203009291.239:84): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203009291.239:85): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1203009723.749:86): avc: denied { getattr } for pid=12990 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203009723.749:86): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fff9da36270 a2=7fff9da36270 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203009723.749:87): avc: denied { search } for pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203009723.749:87): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fff9da35f70 a2=0 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203009723.750:88): avc: denied { read } for pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203009723.750:88): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203009723.758:89): avc: denied { getattr } for pid=12990 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203009723.758:89): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff9da360e0 a2=7fff9da360e0 a3=3688d529f0 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203009723.758:90): avc: denied { setattr } for pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203009723.758:90): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff9da36170 a2=3688d529d8 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203009723.758:91): avc: denied { rmdir } for pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203009723.758:91): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203009723.849:92): avc: denied { getattr } for pid=12990 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1203009723.849:92): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff9da360e0 a2=7fff9da360e0 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1203012061.811:93): user pid=17743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203012061.812:94): user pid=17743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203012061.812:95): login pid=17743 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203012061.858:96): user pid=17743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203012061.994:97): user pid=17743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203012061.995:98): user pid=17743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1203015661.006:99): user pid=21190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203015661.008:100): user pid=21190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203015661.008:101): login pid=21190 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203015661.022:102): user pid=21190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203015661.059:103): user pid=21190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203015661.060:104): user pid=21190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203016724.716:105): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1203016724.754:106): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1203016726.994:107): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203016726.995:108): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203016726.997:109): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1203016726.998:110): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203016726.998:111): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1203016726.998:112): avc: denied { signal } for pid=2832 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1203016726.998:112): arch=c000003e syscall=62 success=yes exit=0 a0=b5d a1=f a2=b5d a3=0 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1203016726.999:113): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1203016738.993:8208): auditd normal halt, sending auid=4294967295 pid=22627 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203017606.093:5077): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2067 res=success >type=CONFIG_CHANGE msg=audit(1203017606.193:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203017606.193:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203017606.731:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203017606.731:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203017607.689:8): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1203017607.689:9): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1203017609.332:10): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1203017609.333:11): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1203017625.336:12): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203017625.354:13): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203017625.398:14): avc: denied { create } for pid=2767 comm="ssh-agent" name="agent.2767" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203017625.398:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffe111c190 a2=6e a3=0 items=0 ppid=2656 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203017625.411:15): avc: denied { write } for pid=2656 comm="login" name="agent.2767" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203017625.411:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff621b1530 a2=6e a3=0 items=0 ppid=1 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1203017625.411:16): login pid=2656 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1203017625.422:17): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203017625.427:18): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203017625.441:19): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203017625.441:20): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203017799.950:21): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203017799.952:22): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203017799.963:23): avc: denied { unlink } for pid=2768 comm="ssh-agent" name="agent.2767" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203017799.963:23): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffe111b9a0 a2=7fffe111b870 a3=0 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1203017806.731:5078): auditd normal halt, sending auid=4294967295 pid=3499 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203274190.591:5183): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2063 res=success >type=CONFIG_CHANGE msg=audit(1203274190.690:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203274190.690:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203274191.320:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203274191.320:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203274192.294:8): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1203274192.294:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1203274193.918:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1203274193.918:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1203274212.014:12): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203274212.033:13): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203274212.077:14): avc: denied { create } for pid=2757 comm="ssh-agent" name="agent.2757" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203274212.077:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff1e1540a0 a2=6e a3=0 items=0 ppid=2644 pid=2757 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203274212.090:15): avc: denied { write } for pid=2644 comm="login" name="agent.2757" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203274212.090:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff9d305680 a2=6e a3=0 items=0 ppid=1 pid=2644 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1203274212.091:16): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203274212.103:17): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203274212.115:18): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203274227.110:19): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203274227.113:20): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203274227.114:21): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203274227.115:22): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203274227.115:23): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203274227.115:24): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203274307.589:25): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203274307.592:26): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203274307.593:27): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203274307.594:28): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203274307.594:29): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203274402.178:30): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203274402.181:31): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203274402.195:32): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203274402.196:33): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203274402.196:34): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203274402.196:35): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/libffi/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=AVC msg=audit(1203274571.998:36): avc: denied { read write } for pid=8653 comm="groupadd" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274571.998:36): arch=c000003e syscall=59 success=yes exit=0 a0=8cb3c0 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=8650 pid=8653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203274572.058:37): avc: denied { ioctl } for pid=8653 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274572.058:37): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff83c8a0e0 a3=2aaaaf551412 items=0 ppid=8650 pid=8653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203274572.058:38): avc: denied { getattr } for pid=8653 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274572.058:38): arch=c000003e syscall=6 success=yes exit=0 a0=7fff83c8e780 a1=7fff83c8a2f0 a2=7fff83c8a2f0 a3=2aaaaf551412 items=0 ppid=8650 pid=8653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203274572.058:39): user pid=8653 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=beaglidx exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1203274572.059:40): avc: denied { read write } for pid=8654 comm="useradd" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274572.059:40): arch=c000003e syscall=59 success=yes exit=0 a0=8cab00 a1=8c9d70 a2=8c7fd0 a3=65 items=0 ppid=8650 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203274572.108:41): avc: denied { ioctl } for pid=8654 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274572.108:41): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7ffff8b01980 a3=2aaaaf5d2d32 items=0 ppid=8650 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203274572.109:42): avc: denied { getattr } for pid=8654 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274572.109:42): arch=c000003e syscall=6 success=yes exit=0 a0=7ffff8b06020 a1=7ffff8b01b90 a2=7ffff8b01b90 a3=2aaaaf5d2d32 items=0 ppid=8650 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1203274572.109:43): user pid=8654 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=beaglidx exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_CHAUTHTOK msg=audit(1203274617.384:44): user pid=8761 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1203274699.629:45): avc: denied { read write } for pid=8928 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274699.629:45): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfb0 a1=2aaab2aaa440 a2=0 a3=0 items=0 ppid=8886 pid=8928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1203274700.107:46): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1203274699.786:47): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1203274699.786:47): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=8886 pid=8928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1203274815.443:48): user pid=2457 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1203274823.864:49): avc: denied { read write } for pid=3537 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274823.864:49): arch=c000003e syscall=59 success=yes exit=0 a0=9e6890 a1=20894a0 a2=0 a3=2aaaaaaef210 items=0 ppid=2691 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1203274824.325:50): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1203274824.006:51): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1203274824.006:51): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=2691 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1203274825.030:52): user pid=2691 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203274833.247:53): avc: denied { read write } for pid=5393 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274833.247:53): arch=c000003e syscall=59 success=yes exit=0 a0=1bdb1a0 a1=8fb6730 a2=0 a3=2aaaaaaef210 items=0 ppid=3745 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1203274833.711:54): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1203274833.391:55): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1203274833.391:55): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=3745 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1203274834.128:56): user pid=3745 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1203274835.409:57): user pid=5596 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1203274843.147:58): avc: denied { read write } for pid=5610 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274843.147:58): arch=c000003e syscall=59 success=yes exit=0 a0=9e6890 a1=20894a0 a2=0 a3=2aaaaaaef210 items=0 ppid=5598 pid=5610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1203274843.628:59): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1203274843.303:60): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1203274843.303:60): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=5598 pid=5610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1203274844.059:61): user pid=5598 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203274852.417:62): avc: denied { read write } for pid=7244 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1203274852.417:62): arch=c000003e syscall=59 success=yes exit=0 a0=1bdb1a0 a1=8fb6730 a2=0 a3=2aaaaaaef210 items=0 ppid=5612 pid=7244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1203274852.882:63): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1203274852.555:64): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1203274852.555:64): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=5612 pid=7244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1203274853.954:65): user pid=5612 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203274861.380:66): user pid=9019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203274861.381:67): user pid=9019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203274861.381:68): login pid=9019 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203274861.391:69): user pid=9019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203274861.615:70): user pid=9019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203274861.616:71): user pid=9019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203274936.794:72): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203274936.796:73): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203274936.827:74): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203274936.828:75): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203274975.452:76): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203274975.453:77): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203275426.186:78): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203275426.189:79): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203275426.191:80): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203275426.191:81): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1203275426.191:82): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203278461.629:83): user pid=9733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203278461.631:84): user pid=9733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203278461.631:85): login pid=9733 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203278461.641:86): user pid=9733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203278461.663:87): user pid=9733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203278461.664:88): user pid=9733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1203279779.407:89): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203279779.407:90): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203279786.021:91): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203279786.022:92): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1203279786.035:93): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203279786.035:94): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1203280031.900:95): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203280031.903:96): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280031.904:97): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280031.906:98): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280031.906:99): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280031.906:100): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280042.761:101): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280042.761:102): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280042.761:103): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280042.762:104): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1203280092.897:105): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203280092.898:106): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203280110.080:107): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280110.081:108): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280110.081:109): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280110.082:110): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280123.792:111): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280123.793:112): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280123.793:113): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280123.793:114): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280236.956:115): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280236.957:116): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280236.957:117): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280236.957:118): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=AVC msg=audit(1203280406.572:119): avc: denied { getattr } for pid=32379 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203280406.572:119): arch=c000003e syscall=6 success=yes exit=0 a0=60442b a1=7fffe36c8020 a2=7fffe36c8020 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203280406.572:120): avc: denied { search } for pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203280406.572:120): arch=c000003e syscall=80 success=yes exit=0 a0=60442b a1=7fffe36c7d20 a2=0 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203280406.572:121): avc: denied { read } for pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203280406.572:121): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203280406.581:122): avc: denied { getattr } for pid=32379 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203280406.581:122): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffe36c7e90 a2=7fffe36c7e90 a3=3688d529f0 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203280406.581:123): avc: denied { setattr } for pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203280406.581:123): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffe36c7f20 a2=3688d529d8 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203280406.581:124): avc: denied { rmdir } for pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203280406.581:124): arch=c000003e syscall=84 success=no exit=-39 a0=60442b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203280406.652:125): avc: denied { getattr } for pid=32379 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1203280406.652:125): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffe36c7e90 a2=7fffe36c7e90 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_AUTH msg=audit(1203280588.451:126): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203280588.454:127): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280588.455:128): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280588.456:129): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280588.456:130): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280588.457:131): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280598.371:132): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280598.372:133): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280598.372:134): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280598.372:135): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280619.956:136): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280619.957:137): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280619.957:138): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280619.957:139): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280626.441:140): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280626.442:141): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280626.442:142): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280626.443:143): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203280635.907:144): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203280635.908:145): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203280635.908:146): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203280635.908:147): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1203280744.694:148): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1203280744.697:149): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203280744.728:150): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203280744.728:151): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_LOGIN msg=audit(1203280744.775:152): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_AUTH msg=audit(1203280905.096:153): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1203280905.099:154): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203280905.100:155): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203280905.101:156): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203280905.101:157): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203280905.101:158): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203280927.263:159): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203280927.263:160): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203280927.263:161): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203280927.264:162): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum-builddep" (terminal=tty4 res=success)' >type=USER_AUTH msg=audit(1203281041.560:163): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203281041.562:164): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203281041.562:165): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203281041.563:166): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203281041.563:167): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203281041.564:168): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203281071.916:169): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203281071.917:170): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203281071.917:171): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203281071.917:172): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203282062.047:173): user pid=15345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203282062.048:174): user pid=15345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203282062.048:175): login pid=15345 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203282062.339:176): user pid=15345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203282062.859:177): user pid=15345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203282062.860:178): user pid=15345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203282615.109:179): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203282615.138:180): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203282615.169:181): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203282615.174:182): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203282615.174:183): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203282615.175:184): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203282717.086:185): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203282717.087:186): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203282717.087:187): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203282717.088:188): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203282841.721:189): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203282841.723:190): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203282841.723:191): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203282841.723:192): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203282880.935:193): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203282880.935:194): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203282880.935:195): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203282880.936:196): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203282907.847:197): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203282907.848:198): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203282907.848:199): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203282907.848:200): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203283529.926:201): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203283529.945:202): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203283529.968:203): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203283529.969:204): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203283529.969:205): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203283529.969:206): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1203283552.058:207): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:mono_t:s0-s0:c0.c1023 pid=6705 comm="beagled-helper" sig=11 >type=USER_AUTH msg=audit(1203285046.797:208): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203285046.816:209): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203285046.868:210): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203285046.879:211): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203285046.879:212): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203285046.879:213): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=USER_CHAUTHTOK msg=audit(1203285207.018:214): user pid=29656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285207.023:215): user pid=29660 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285216.474:216): user pid=30405 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285216.483:217): user pid=30410 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285219.871:218): user pid=30581 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285225.393:219): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285227.052:220): user pid=31186 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1203285227.065:221): user pid=31202 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1203285227.078:222): user pid=31214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285227.219:223): user pid=31223 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1203285227.240:224): user pid=31223 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1203285641.110:225): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1203285641.113:226): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203285641.139:227): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203285641.149:228): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203285641.149:229): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203285641.149:230): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1203285662.013:231): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203285662.014:232): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203285662.014:233): login pid=2250 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203285662.122:234): user pid=2250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203285662.490:235): user pid=2250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203285662.491:236): user pid=2250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203285698.382:237): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203285698.384:238): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203285698.384:239): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203285698.385:240): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)' >type=USER_AUTH msg=audit(1203286623.999:241): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1203286624.043:242): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203286624.058:243): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203286624.072:244): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203286624.072:245): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203286624.073:246): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203286643.868:247): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203286643.869:248): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203286643.869:249): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203286643.869:250): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/usr/bin/yum" (terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203286711.237:251): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203286711.238:252): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203286711.238:253): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203286711.239:254): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1203286719.872:255): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1203286719.873:256): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203286719.873:257): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1203286719.874:258): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)' >type=USER_AUTH msg=audit(1203286770.193:259): user pid=16363 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1203286770.193:260): user pid=16363 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1203286770.193:261): user pid=16363 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1203286780.303:262): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1203286783.458:263): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203286783.461:264): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203286783.461:265): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203286783.462:266): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203286783.462:267): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203286783.462:268): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203286783.469:269): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203286783.469:270): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203286783.602:271): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203286783.603:272): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_DISP msg=audit(1203286783.744:273): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203286783.807:274): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1203286783.808:275): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203286783.808:276): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203286783.812:277): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203286783.832:278): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1203286783.832:279): avc: denied { unlink } for pid=2758 comm="ssh-agent" name="agent.2757" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203286783.832:279): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff1e1538b0 a2=7fff1e153780 a3=0 items=0 ppid=1 pid=2758 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1203286799.702:5184): auditd normal halt, sending auid=4294967295 pid=16789 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203350293.723:7981): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2063 res=success >type=CONFIG_CHANGE msg=audit(1203350293.823:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203350293.823:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203350294.229:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203350294.229:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203350295.178:8): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1203350295.178:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1203350296.354:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1203350296.355:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1203350314.434:12): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203350314.452:13): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203350314.488:14): avc: denied { create } for pid=2760 comm="ssh-agent" name="agent.2760" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203350314.488:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff0c65720 a2=6e a3=0 items=0 ppid=2651 pid=2760 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203350314.510:15): avc: denied { write } for pid=2651 comm="login" name="agent.2760" dev=dm-0 ino=1960488 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203350314.510:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff559d6d50 a2=6e a3=0 items=0 ppid=1 pid=2651 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1203350314.510:16): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203350314.522:17): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203350314.535:18): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203350322.272:19): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203350322.275:20): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203350322.276:21): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203350322.277:22): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203350322.278:23): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203350322.278:24): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203350373.722:25): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203350373.725:26): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203350373.726:27): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203350373.726:28): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203350373.727:29): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203350461.653:30): user pid=5372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203350461.654:31): user pid=5372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203350461.654:32): login pid=5372 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203350461.688:33): user pid=5372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203350461.830:34): user pid=5372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203350461.831:35): user pid=5372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203350975.668:36): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203350975.672:37): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203350975.673:38): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203350975.673:39): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1203350975.674:40): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1203351102.891:41): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203351102.894:42): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203351102.902:43): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203351102.902:44): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203351138.566:45): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203351138.567:46): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203351144.329:47): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203351144.332:48): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203351144.338:49): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203351144.338:50): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203351154.547:51): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203351154.548:52): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203352172.422:53): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203352172.424:54): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203352172.432:55): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203352172.434:56): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203352172.434:57): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203352172.434:58): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203352228.082:59): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203352228.083:60): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203352228.083:61): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203352228.083:62): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203354062.594:63): user pid=10442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203354062.595:64): user pid=10442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203354062.596:65): login pid=10442 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203354063.306:66): user pid=10442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203354064.328:67): user pid=10442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203354064.328:68): user pid=10442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203354359.685:69): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203354359.688:70): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203354359.703:71): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203354359.704:72): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203354359.705:73): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203354359.705:74): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203354415.770:75): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203354415.771:76): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203354415.771:77): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203354415.771:78): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=USER_START msg=audit(1203356257.720:79): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203356257.720:80): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203356319.501:81): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203356319.501:82): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1203356319.599:83): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203356319.600:84): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1203356661.696:85): user pid=25733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_AUTH msg=audit(1203356668.506:86): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203356668.542:87): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203356668.577:88): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203356668.579:89): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203356668.579:90): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203356668.579:91): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1203356835.262:92): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203356835.263:93): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1203357583.266:94): avc: denied { getattr } for pid=6612 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203357583.266:94): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fffd03e8d50 a2=7fffd03e8d50 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203357583.266:95): avc: denied { search } for pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203357583.266:95): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fffd03e8a50 a2=0 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203357583.266:96): avc: denied { read } for pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203357583.266:96): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203357583.275:97): avc: denied { getattr } for pid=6612 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203357583.275:97): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffd03e8bc0 a2=7fffd03e8bc0 a3=3688d529f0 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203357583.275:98): avc: denied { setattr } for pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203357583.275:98): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffd03e8c50 a2=3688d529d8 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203357583.275:99): avc: denied { rmdir } for pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203357583.275:99): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203357583.400:100): avc: denied { getattr } for pid=6612 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1203357583.400:100): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffd03e8bc0 a2=7fffd03e8bc0 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1203357661.516:101): user pid=6720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203357661.518:102): user pid=6720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203357661.518:103): login pid=6720 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203357661.602:104): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203357661.698:105): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203357661.699:106): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203359133.890:107): user pid=7913 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1203359133.891:108): user pid=7913 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1203359133.891:109): user pid=7913 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1203359139.236:110): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203359139.238:111): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203359139.264:112): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203359139.265:113): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203359139.265:114): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203359139.266:115): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203359139.273:116): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203359139.273:117): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203359139.623:118): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203359139.657:119): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203359139.679:120): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203359139.685:121): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1203359139.722:122): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203359139.746:123): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1203359139.758:124): avc: denied { unlink } for pid=2761 comm="ssh-agent" name="agent.2760" dev=dm-0 ino=1960488 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203359139.758:124): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff0c64f30 a2=7ffff0c64e00 a3=0 items=0 ppid=1 pid=2761 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1203359156.116:7982): auditd normal halt, sending auid=4294967295 pid=8326 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203450559.846:3476): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2061 res=success >type=CONFIG_CHANGE msg=audit(1203450559.946:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203450559.946:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203450560.500:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203450560.500:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203450561.566:8): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1203450561.566:9): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1203450562.941:10): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1203450562.941:11): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1203450592.879:12): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1203450592.897:13): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1203450592.992:14): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1203450593.146:15): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1203450596.190:16): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3075 comm="pulseaudio" sig=6 >type=USER_AUTH msg=audit(1203450601.884:17): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203450601.886:18): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203450601.888:19): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203450601.888:20): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203450601.888:21): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203450609.596:22): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203450609.598:23): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203450609.599:24): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203450609.600:25): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203450609.601:26): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203450609.601:27): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=AVC msg=audit(1203450633.931:28): avc: denied { execheap } for pid=3372 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1203450633.931:28): arch=c000003e syscall=10 success=yes exit=0 a0=f06000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3372 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1203450992.465:29): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203450992.468:30): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203450992.470:31): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203450992.470:32): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203450992.470:33): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203451229.126:34): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203451229.128:35): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203451229.143:36): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203451229.143:37): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203451261.805:38): user pid=7818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=failed)' >type=USER_ACCT msg=audit(1203451261.810:39): user pid=7818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=failed)' >type=USER_END msg=audit(1203451424.923:40): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1203451424.923:41): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1203451425.580:42): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203451425.581:43): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203451425.582:44): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1203451425.583:45): avc: denied { signal } for pid=2783 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1203451425.583:45): arch=c000003e syscall=62 success=yes exit=0 a0=b28 a1=f a2=b28 a3=0 items=0 ppid=1 pid=2783 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1203451425.583:46): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203451425.587:47): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203451425.590:48): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1203451433.148:3477): auditd normal halt, sending auid=4294967295 pid=8446 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203534733.753:6017): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2072 res=success >type=CONFIG_CHANGE msg=audit(1203534733.853:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203534733.853:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203534734.176:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203534734.176:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203534735.009:8): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1203534735.009:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1203534736.558:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1203534736.558:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1203534755.268:12): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203534755.270:13): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203534755.328:14): avc: denied { create } for pid=2768 comm="ssh-agent" name="agent.2768" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203534755.328:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff6ed19fc0 a2=6e a3=0 items=0 ppid=2660 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203534755.329:15): avc: denied { write } for pid=2660 comm="login" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203534755.329:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff04ef6290 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1203534755.329:16): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203534755.338:17): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203534755.353:18): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203534764.363:19): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203534764.366:20): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203534764.367:21): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203534764.368:22): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203534764.368:23): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203534764.368:24): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203534770.203:25): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203534770.206:26): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203534770.207:27): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203534770.207:28): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203534770.208:29): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203535931.069:30): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203535931.072:31): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203535931.160:32): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203535931.186:33): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1203535931.248:34): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1203536601.797:35): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203536601.799:36): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203536602.245:37): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203536602.257:38): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203536775.862:39): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203536775.864:40): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203537661.800:41): user pid=9051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203537661.802:42): user pid=9051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203537661.802:43): login pid=9051 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203537661.869:44): user pid=9051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203537662.101:45): user pid=9051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203537662.102:46): user pid=9051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203538821.605:47): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203538821.607:48): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203538821.620:49): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203538821.620:50): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203538821.620:51): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203538821.621:52): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203538821.822:53): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203538821.823:54): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203538822.130:55): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203538822.131:56): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203538822.131:57): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203538822.132:58): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203538822.133:59): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203538822.134:60): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1203538822.140:61): avc: denied { unlink } for pid=2769 comm="ssh-agent" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203538822.140:61): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff6ed197d0 a2=7fff6ed196a0 a3=0 items=0 ppid=1 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1203538837.691:6018): auditd normal halt, sending auid=4294967295 pid=20353 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203617163.045:2623): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2064 res=success >type=CONFIG_CHANGE msg=audit(1203617163.145:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203617163.145:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203617163.625:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203617163.625:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203617164.674:8): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1203617164.674:9): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1203617166.256:10): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1203617166.256:11): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1203617237.576:12): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1203617244.239:13): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1203617244.241:14): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1203617244.337:15): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1203617244.481:16): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1203617286.937:17): avc: denied { execheap } for pid=3259 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1203617286.937:17): arch=c000003e syscall=10 success=yes exit=0 a0=e70000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3259 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203618456.377:18): avc: denied { write } for pid=4891 comm="mount" path="/home/s4504kr/.xsession-errors" dev=dm-1 ino=3183680 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_t:s0 tclass=file >type=AVC msg=audit(1203618456.377:18): avc: denied { write } for pid=4891 comm="mount" path="/tmp/kde-s4504kr/kio_fileUJQrAb.tmp" dev=dm-0 ino=331413 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1203618456.377:18): arch=c000003e syscall=59 success=yes exit=0 a0=8cbdb0 a1=8cafd0 a2=8ca250 a3=65 items=0 ppid=4890 pid=4891 auid=4294967295 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1203620128.680:19): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1203620128.680:20): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1203620137.057:2624): auditd normal halt, sending auid=4294967295 pid=6904 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203879723.458:8187): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2072 res=success >type=CONFIG_CHANGE msg=audit(1203879723.558:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203879723.558:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203879723.880:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203879723.880:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203879724.739:8): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1203879724.739:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1203879726.794:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1203879726.794:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1203879743.422:12): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203879743.425:13): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203879743.468:14): avc: denied { create } for pid=2768 comm="ssh-agent" name="agent.2768" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203879743.468:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff21bd74d0 a2=6e a3=0 items=0 ppid=2660 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203879743.469:15): avc: denied { write } for pid=2660 comm="login" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203879743.469:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffb3cb7020 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1203879743.470:16): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203879743.476:17): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203879743.490:18): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203879756.564:19): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203879756.567:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203879756.568:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203879756.569:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203879756.569:23): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203879756.569:24): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203879995.650:25): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203879995.651:26): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203879995.651:27): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203879995.651:28): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203880034.569:29): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203880034.570:30): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203880034.570:31): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203880034.570:32): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203880111.437:33): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203880111.438:34): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203880111.438:35): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203880111.438:36): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203880138.444:37): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203880138.445:38): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203880138.445:39): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203880138.445:40): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203880144.344:41): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203880144.347:42): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203880144.348:43): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203880144.349:44): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203880144.350:45): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203880426.828:46): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203880426.830:47): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203880426.830:48): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203880426.831:49): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203880426.831:50): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203880426.831:51): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kdelibs4" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203880446.154:52): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203880446.155:53): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203880446.155:54): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203880446.155:55): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kdelibs4" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203880575.695:56): user pid=3762 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1203880581.384:57): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203880581.386:58): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203880581.387:59): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203880581.387:60): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203880581.387:61): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203880581.388:62): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203880811.163:63): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203880811.165:64): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203880811.166:65): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203880811.166:66): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1203880811.166:67): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1203881215.730:68): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1203881215.733:69): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1203881215.734:70): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1203881215.734:71): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1203881215.734:72): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1203883261.888:73): user pid=26992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203883261.890:74): user pid=26992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203883261.890:75): login pid=26992 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203883261.913:76): user pid=26992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203883262.068:77): user pid=26992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203883262.069:78): user pid=26992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1203885313.345:79): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203885313.345:80): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203885320.075:81): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203885320.075:82): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1203885320.108:83): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203885320.108:84): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203885574.364:85): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203885574.364:86): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1203885880.432:87): avc: denied { getattr } for pid=7354 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203885880.432:87): arch=c000003e syscall=6 success=yes exit=0 a0=60440b a1=7fff0c0e1a40 a2=7fff0c0e1a40 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203885880.432:88): avc: denied { search } for pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203885880.432:88): arch=c000003e syscall=80 success=yes exit=0 a0=60440b a1=7fff0c0e1740 a2=0 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203885880.432:89): avc: denied { read } for pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203885880.432:89): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203885880.442:90): avc: denied { getattr } for pid=7354 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163791 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203885880.442:90): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff0c0e18b0 a2=7fff0c0e18b0 a3=3688d529f0 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203885880.442:91): avc: denied { setattr } for pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203885880.442:91): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff0c0e1940 a2=3688d529d8 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203885880.442:92): avc: denied { rmdir } for pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203885880.442:92): arch=c000003e syscall=84 success=no exit=-39 a0=60440b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203885880.566:93): avc: denied { getattr } for pid=7354 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1203885880.566:93): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff0c0e18b0 a2=7fff0c0e18b0 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1203886861.190:94): user pid=8360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203886861.192:95): user pid=8360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203886861.192:96): login pid=8360 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203886861.237:97): user pid=8360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203886861.284:98): user pid=8360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203886861.285:99): user pid=8360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1203890230.753:100): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11092 comm="meinproc4" sig=4 >type=ANOM_ABEND msg=audit(1203890230.755:101): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11109 comm="meinproc4" sig=4 >type=ANOM_ABEND msg=audit(1203890234.434:102): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11107 comm="meinproc4" sig=4 >type=USER_ACCT msg=audit(1203890461.418:103): user pid=11484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203890461.419:104): user pid=11484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203890461.419:105): login pid=11484 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203890461.681:106): user pid=11484 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203890461.900:107): user pid=11484 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203890461.901:108): user pid=11484 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1203891524.211:109): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=23787 comm="meinproc4" sig=4 >type=USER_AUTH msg=audit(1203892013.550:110): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1203892018.193:111): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1203892018.196:112): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1203892018.241:113): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1203892018.251:114): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1203892018.251:115): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1203892018.251:116): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1203892018.597:117): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1203892018.598:118): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1203892019.033:119): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1203892019.033:120): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203892019.034:121): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203892019.098:122): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1203892019.098:123): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203892019.098:124): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203892019.126:125): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203892019.127:126): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1203892019.126:127): avc: denied { unlink } for pid=2769 comm="ssh-agent" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203892019.126:127): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff21bd6ce0 a2=7fff21bd6bb0 a3=0 items=0 ppid=1 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1203892031.419:8188): auditd normal halt, sending auid=4294967295 pid=20686 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1203954584.002:9479): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2063 res=success >type=CONFIG_CHANGE msg=audit(1203954584.102:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203954584.102:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1203954584.400:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1203954584.400:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1203954585.316:8): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1203954585.316:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1203954586.807:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1203954586.808:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1203954637.054:12): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203954637.057:13): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1203954637.100:14): avc: denied { create } for pid=2760 comm="ssh-agent" name="agent.2760" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203954637.100:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2dc16640 a2=6e a3=0 items=0 ppid=2651 pid=2760 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1203954637.101:15): avc: denied { write } for pid=2651 comm="login" name="agent.2760" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203954637.101:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7ffffeda9120 a2=6e a3=0 items=0 ppid=1 pid=2651 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1203954637.102:16): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203954637.108:17): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1203954637.122:18): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203954647.458:19): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203954647.461:20): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203954647.462:21): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203954647.463:22): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203954647.463:23): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203954647.463:24): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203954802.790:25): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1203954802.813:26): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1203954806.818:27): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203954806.821:28): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203954806.822:29): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203954806.822:30): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1203954806.822:31): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203955077.237:32): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203955077.240:33): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203955077.247:34): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203955077.247:35): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203955192.642:36): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203955192.643:37): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203955262.013:38): user pid=6504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203955262.014:39): user pid=6504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203955262.014:40): login pid=6504 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203955262.027:41): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203955262.433:42): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203955262.434:43): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203955351.102:44): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203955351.105:45): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203955351.106:46): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203955351.106:47): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1203955351.106:48): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1203955840.686:49): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203955840.688:50): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203955840.739:51): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203955840.751:52): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203955840.751:53): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203955840.751:54): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/kdelibs-4.0.1/x86_64-redhat-linux-gnu/bin" cmd="/bin/cp" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1203956382.660:55): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=25328 comm="meinproc4" sig=4 >type=ANOM_ABEND msg=audit(1203957122.906:56): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=3385 comm="meinproc4" sig=4 >type=USER_AUTH msg=audit(1203957290.103:57): user pid=3642 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1203957300.394:58): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203957300.396:59): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203957300.397:60): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203957300.397:61): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203957300.397:62): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203957300.398:63): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/kdelibs-4.0.1/x86_64-redhat-linux-gnu/bin" cmd="/bin/cp" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1203957579.970:64): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=6890 comm="meinproc4" sig=4 >type=ANOM_ABEND msg=audit(1203957693.080:65): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=8152 comm="meinproc4" sig=4 >type=USER_ACCT msg=audit(1203958861.736:66): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203958861.740:67): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203958861.740:68): login pid=21610 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203958861.982:69): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203958862.351:70): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203958862.352:71): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203959564.058:72): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1203959564.060:73): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1203959564.117:74): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1203959564.123:75): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1203959564.123:76): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1203959564.124:77): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=USER_START msg=audit(1203960235.848:78): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203960235.848:79): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203960244.073:80): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203960244.073:81): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1203960244.098:82): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1203960244.098:83): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1203960502.298:84): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1203960502.299:85): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1203961396.730:86): avc: denied { getattr } for pid=452 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.730:86): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fff6e74b0b0 a2=7fff6e74b0b0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.730:87): avc: denied { search } for pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.730:87): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fff6e74adb0 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.730:88): avc: denied { read } for pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.730:88): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.739:89): avc: denied { getattr } for pid=452 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163791 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1203961396.739:89): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff6e74af20 a2=7fff6e74af20 a3=3688d529f0 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.739:90): avc: denied { setattr } for pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.739:90): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff6e74afb0 a2=3688d529d8 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.739:91): avc: denied { rmdir } for pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.739:91): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.875:92): avc: denied { getattr } for pid=452 comm="tmpwatch" path="/tmp/pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.875:92): arch=c000003e syscall=6 success=yes exit=0 a0=604533 a1=7fff6e74b0b0 a2=7fff6e74b0b0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.875:93): avc: denied { search } for pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.875:93): arch=c000003e syscall=80 success=yes exit=0 a0=604533 a1=7fff6e74adb0 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.875:94): avc: denied { read } for pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.875:94): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.888:95): avc: denied { getattr } for pid=452 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1203961396.888:95): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff6e74af20 a2=7fff6e74af20 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.888:96): avc: denied { setattr } for pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.888:96): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff6e74afb0 a2=3688d529d8 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1203961396.888:97): avc: denied { rmdir } for pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1203961396.888:97): arch=c000003e syscall=84 success=no exit=-39 a0=604533 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1203962461.584:98): user pid=12665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203962461.586:99): user pid=12665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203962461.586:100): login pid=12665 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203962461.733:101): user pid=12665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203962461.933:102): user pid=12665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203962461.934:103): user pid=12665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203964696.420:104): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203964696.422:105): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203964696.479:106): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203964696.485:107): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203964696.485:108): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203964696.486:109): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203964777.970:110): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203964777.970:111): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203964777.971:112): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203964777.971:113): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203966061.180:114): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203966061.182:115): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203966061.182:116): login pid=18404 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203966061.274:117): user pid=18404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203966061.542:118): user pid=18404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203966061.543:119): user pid=18404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203966647.342:120): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203966647.344:121): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203966647.400:122): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203966647.406:123): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1203966839.912:124): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203966839.912:125): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203969661.585:126): user pid=25335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203969661.587:127): user pid=25335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203969661.587:128): login pid=25335 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203969661.602:129): user pid=25335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203969661.627:130): user pid=25335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203969661.628:131): user pid=25335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203972517.778:132): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203972517.780:133): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203972517.829:134): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203972517.835:135): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203972517.835:136): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203972517.835:137): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203973261.780:138): user pid=27112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203973261.782:139): user pid=27112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203973261.782:140): login pid=27112 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203973261.892:141): user pid=27112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203973262.211:142): user pid=27112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203973262.212:143): user pid=27112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1203975588.096:144): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203975588.099:145): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1203975588.164:146): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1203975588.170:147): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203975588.170:148): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1203975588.170:149): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1203976861.412:150): user pid=346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1203976861.414:151): user pid=346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1203976861.414:152): login pid=346 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1203976861.545:153): user pid=346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203976861.857:154): user pid=346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1203976861.858:155): user pid=346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1203979319.334:156): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1203979319.385:157): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1203979329.344:158): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203979329.346:159): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1203979329.347:160): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1203979329.376:161): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203979329.376:162): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1203979329.377:163): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1203979329.661:164): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1203979329.661:165): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203979330.102:166): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1203979330.104:167): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1203979330.150:168): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1203979330.184:169): avc: denied { unlink } for pid=2761 comm="ssh-agent" name="agent.2760" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=USER_END msg=audit(1203979330.198:170): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=SYSCALL msg=audit(1203979330.184:169): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2dc15e50 a2=7fff2dc15d20 a3=0 items=0 ppid=1 pid=2761 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1203979351.043:9480): auditd normal halt, sending auid=4294967295 pid=14198 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204037966.317:8142): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2073 res=success >type=CONFIG_CHANGE msg=audit(1204037966.417:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204037966.417:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204037966.756:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204037966.756:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204037967.614:8): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204037967.614:9): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204037969.462:10): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204037969.463:11): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204037987.915:12): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204037987.918:13): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204037987.961:14): avc: denied { create } for pid=2769 comm="ssh-agent" name="agent.2769" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204037987.961:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff998090e0 a2=6e a3=0 items=0 ppid=2661 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204037987.976:15): avc: denied { write } for pid=2661 comm="login" name="agent.2769" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204037987.976:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffc1fab320 a2=6e a3=0 items=0 ppid=1 pid=2661 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1204037987.976:16): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204037987.985:17): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204037987.999:18): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204037997.787:19): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204037997.790:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204037997.791:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204037997.792:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204037997.792:23): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204037997.792:24): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204038061.586:25): user pid=3019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204038061.587:26): user pid=3019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204038061.587:27): login pid=3019 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204038061.602:28): user pid=3019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204038061.889:29): user pid=3019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204038061.890:30): user pid=3019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204038090.542:31): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204038090.542:32): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204038090.543:33): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204038090.543:34): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204038095.817:35): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204038095.820:36): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204038095.821:37): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204038095.821:38): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204038095.822:39): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204038162.086:40): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204038162.087:41): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204038162.087:42): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204038162.088:43): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204038270.849:44): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204038270.849:45): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204038270.850:46): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204038270.850:47): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204038319.126:48): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_ACCT msg=audit(1204038319.129:49): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_START msg=audit(1204038319.130:50): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=CRED_ACQ msg=audit(1204038319.130:51): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_LOGIN msg=audit(1204038319.130:52): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=CRED_ACQ msg=audit(1204038486.755:53): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204038486.756:54): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204038486.757:55): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204038486.757:56): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204038517.858:57): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204038517.860:58): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204038517.867:59): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204038517.867:60): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204038612.414:61): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204038612.415:62): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204041662.238:63): user pid=10479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204041662.239:64): user pid=10479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204041662.240:65): login pid=10479 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204041662.569:66): user pid=10479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204041663.085:67): user pid=10479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204041663.086:68): user pid=10479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204042177.660:69): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204042177.663:70): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204042177.736:71): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204042177.742:72): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204042177.742:73): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204042177.743:74): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=16 cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204042379.565:75): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204042379.566:76): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204042379.566:77): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204042379.567:78): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204042419.885:79): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204042419.886:80): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204042419.886:81): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204042419.886:82): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_START msg=audit(1204043574.690:83): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204043574.690:84): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1204043581.977:85): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204043581.978:86): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204043582.143:87): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204043582.143:88): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1204043831.322:89): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204043831.322:90): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204044068.906:91): avc: denied { getattr } for pid=13037 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204044068.906:91): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fffe59cf330 a2=7fffe59cf330 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204044068.906:92): avc: denied { search } for pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204044068.906:92): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fffe59cf030 a2=0 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204044068.906:93): avc: denied { read } for pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204044068.906:93): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204044068.915:94): avc: denied { getattr } for pid=13037 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163791 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204044068.915:94): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffe59cf1a0 a2=7fffe59cf1a0 a3=3688d529f0 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204044068.915:95): avc: denied { setattr } for pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204044068.915:95): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffe59cf230 a2=3688d529d8 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204044068.915:96): avc: denied { rmdir } for pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204044068.915:96): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204044069.014:97): avc: denied { getattr } for pid=13037 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1204044069.014:97): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffe59cf1a0 a2=7fffe59cf1a0 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1204045261.363:98): user pid=25834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204045261.365:99): user pid=25834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204045261.365:100): login pid=25834 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204045261.482:101): user pid=25834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204045261.671:102): user pid=25834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204045261.672:103): user pid=25834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204046501.160:104): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204046501.163:105): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204046501.203:106): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204046501.209:107): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204046501.209:108): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204046501.209:109): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204046501.353:110): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204046501.353:111): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204046501.597:112): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=CRED_DISP msg=audit(1204046501.597:113): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204046501.610:114): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204046501.616:115): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_END msg=audit(1204046501.617:116): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204046501.617:117): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204046501.617:118): avc: denied { unlink } for pid=2770 comm="ssh-agent" name="agent.2769" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204046501.617:118): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff998088f0 a2=7fff998087c0 a3=0 items=0 ppid=1 pid=2770 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1204046519.161:8143): auditd normal halt, sending auid=4294967295 pid=5956 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204063320.622:4318): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2071 res=success >type=CONFIG_CHANGE msg=audit(1204063320.722:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204063320.722:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204063321.310:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204063321.310:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204063322.334:8): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1204063322.334:9): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1204063323.957:10): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204063323.958:11): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1204063389.878:12): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204063389.881:13): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204063389.964:14): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1204063390.107:15): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204063402.820:16): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1204063402.852:17): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204063406.304:18): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204063406.307:19): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204063406.308:20): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204063406.308:21): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204063406.309:22): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204063429.841:23): avc: denied { execheap } for pid=3407 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204063429.841:23): arch=c000003e syscall=10 success=yes exit=0 a0=f01000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3407 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204064851.060:24): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204064851.063:25): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204064851.143:26): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204064851.143:27): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204064851.209:28): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204065180.022:29): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204065180.022:30): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204065180.660:31): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204065180.661:32): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204065180.662:33): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1204065180.662:34): avc: denied { signal } for pid=2793 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204065180.662:34): arch=c000003e syscall=62 success=yes exit=0 a0=b33 a1=f a2=b33 a3=0 items=0 ppid=1 pid=2793 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1204065180.663:35): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1204065190.892:4319): auditd normal halt, sending auid=4294967295 pid=26998 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204129083.936:8788): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2070 res=success >type=CONFIG_CHANGE msg=audit(1204129084.036:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204129084.036:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204129084.565:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204129084.565:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204129085.424:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204129085.424:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204129087.230:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204129087.231:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204129103.900:12): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204129103.903:13): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204129103.946:14): avc: denied { create } for pid=2767 comm="ssh-agent" name="agent.2767" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204129103.946:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff097d2bf0 a2=6e a3=0 items=0 ppid=2658 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204129103.961:15): avc: denied { write } for pid=2658 comm="login" name="agent.2767" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204129103.961:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffadbe8f60 a2=6e a3=0 items=0 ppid=1 pid=2658 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1204129103.961:16): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204129103.970:17): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204129103.984:18): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204129111.550:19): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204129111.552:20): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204129111.554:21): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204129111.555:22): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204129111.555:23): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204129111.555:24): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204129182.223:25): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204129182.224:26): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204129182.224:27): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204129182.224:28): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204129188.699:29): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204129188.701:30): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204129188.702:31): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204129188.702:32): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204129188.702:33): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204129411.727:34): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204129411.728:35): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204129411.728:36): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204129411.728:37): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204129446.380:38): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204129446.381:39): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204129446.381:40): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204129446.381:41): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd="/usr/bin/emacs" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204129459.522:42): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204129459.523:43): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204129459.523:44): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204129459.523:45): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204129532.671:46): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204129532.674:47): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=AVC msg=audit(1204129532.691:48): avc: denied { create } for pid=10977 comm="ssh-agent" name="agent.10977" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204129532.691:48): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffb2888580 a2=6e a3=0 items=0 ppid=2660 pid=10977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204129532.695:49): avc: denied { write } for pid=2660 comm="login" name="agent.10977" dev=dm-0 ino=329657 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204129532.695:49): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffb83466c0 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=LOGIN msg=audit(1204129532.695:50): login pid=2660 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1204129532.705:51): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204129532.713:52): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204129532.713:53): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1204129532.717:54): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1204129885.997:55): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1204129885.999:56): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1204129886.121:57): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1204129886.121:58): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1204129886.319:59): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=ANOM_ABEND msg=audit(1204130057.014:60): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=17994 comm="pulseaudio" sig=6 >type=USER_AUTH msg=audit(1204130832.522:61): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204130832.525:62): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204130832.587:63): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204130832.596:64): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204130832.596:65): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204130832.596:66): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204130913.115:67): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204130913.116:68): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204130913.116:69): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204130913.117:70): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204131661.842:71): user pid=13943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204131661.843:72): user pid=13943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204131661.843:73): login pid=13943 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204131661.930:74): user pid=13943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204131662.630:75): user pid=13943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204131662.632:76): user pid=13943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1204131662.694:77): avc: denied { unlink } for pid=10978 comm="ssh-agent" name="agent.10977" dev=dm-0 ino=329657 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204131662.694:77): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffb2887d90 a2=7fffb2887c60 a3=0 items=0 ppid=1 pid=10978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1204131781.670:78): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204131781.721:79): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1204131787.291:80): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204131787.293:81): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204131787.303:82): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204131787.303:83): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1204131787.304:84): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1204131927.020:85): user pid=21999 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1204131927.020:86): user pid=21999 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1204131927.021:87): user pid=21999 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)' >type=USER_AUTH msg=audit(1204131933.576:88): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1204131933.578:89): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1204131933.594:90): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1204131933.595:91): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1204131933.595:92): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_CMD msg=audit(1204131933.596:93): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)' >type=USER_AUTH msg=audit(1204131933.603:94): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1204131933.603:95): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_DISP msg=audit(1204131933.780:96): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204131933.781:97): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1204131933.932:98): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204131934.023:99): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204131934.108:100): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204131934.155:101): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204131934.197:102): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1204131934.223:103): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1204131934.353:104): avc: denied { unlink } for pid=2768 comm="ssh-agent" name="agent.2767" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204131934.353:104): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff097d2400 a2=7fff097d22d0 a3=0 items=0 ppid=1 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1204131949.758:8789): auditd normal halt, sending auid=4294967295 pid=22413 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204132034.340:4836): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2064 res=success >type=CONFIG_CHANGE msg=audit(1204132034.439:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204132034.439:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204132035.102:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204132035.102:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204132036.126:8): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1204132036.126:9): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1204132037.592:10): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204132037.592:11): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1204132142.920:12): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204132142.924:13): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204132142.925:14): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1204132142.984:15): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204132142.985:16): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)' >type=AVC msg=audit(1204132181.232:17): avc: denied { execheap } for pid=3414 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204132181.232:17): arch=c000003e syscall=10 success=yes exit=0 a0=f01000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3414 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204132216.597:18): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204132216.599:19): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204132216.601:20): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204132216.601:21): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204132216.601:22): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204132251.203:23): avc: denied { execheap } for pid=4020 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204132251.203:23): arch=c000003e syscall=10 success=yes exit=0 a0=10fe000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4020 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204132970.863:24): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1204132970.874:25): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_END msg=audit(1204133574.452:26): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204133574.540:27): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204133614.391:28): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204133614.391:29): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204133625.050:30): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204133625.055:31): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204133625.055:32): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1204133625.087:33): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204133625.087:34): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1204133629.988:35): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=20048 comm="pulseaudio" sig=6 >type=AVC msg=audit(1204133666.969:36): avc: denied { execheap } for pid=20318 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204133666.969:36): arch=c000003e syscall=10 success=yes exit=0 a0=f08000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=20318 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204133868.425:37): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204133868.428:38): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204133868.429:39): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204133868.429:40): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204133868.429:41): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1204133884.132:42): avc: denied { execheap } for pid=20318 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204133884.132:42): arch=c000003e syscall=10 success=yes exit=0 a0=fde000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=20318 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204133922.405:43): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204133922.407:44): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204133922.408:45): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204133922.409:46): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204133922.409:47): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204133922.409:48): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204135261.668:49): user pid=10992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204135261.670:50): user pid=10992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204135261.670:51): login pid=10992 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204135261.797:52): user pid=10992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204135262.124:53): user pid=10992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204135262.125:54): user pid=10992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204136510.426:55): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204136510.435:56): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204136510.783:57): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204136510.784:58): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1204136510.800:59): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204136510.805:60): avc: denied { signal } for pid=2788 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204136510.805:60): arch=c000003e syscall=62 success=yes exit=0 a0=be3 a1=f a2=be3 a3=0 items=0 ppid=1 pid=2788 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1204136511.062:61): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204136512.564:62): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2796 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1204136527.586:4837): auditd normal halt, sending auid=4294967295 pid=13048 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204136608.143:1194): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2070 res=success >type=CONFIG_CHANGE msg=audit(1204136608.243:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204136608.243:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204136608.955:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204136608.955:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204136610.038:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204136610.038:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204136611.330:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204136611.330:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204136629.169:12): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204136629.171:13): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204136629.215:14): avc: denied { create } for pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204136629.215:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff8550a780 a2=6e a3=0 items=0 ppid=2658 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204136629.216:15): avc: denied { write } for pid=2658 comm="login" name="agent.2766" dev=dm-0 ino=327517 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204136629.216:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffe94ba830 a2=6e a3=0 items=0 ppid=1 pid=2658 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1204136629.217:16): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204136629.226:17): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204136629.237:18): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204136665.476:19): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204136665.479:20): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204136665.479:21): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204136665.481:22): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204136665.481:23): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204136665.481:24): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204136697.194:25): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204136697.197:26): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204136697.198:27): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204136697.199:28): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204136697.199:29): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1204136909.179:30): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=3377 comm="klauncher" sig=6 >type=CRED_ACQ msg=audit(1204136921.849:31): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204136921.851:32): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204136921.851:33): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204136921.851:34): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204136945.355:35): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204136945.355:36): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204136945.355:37): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204136945.356:38): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204136953.235:39): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204136953.236:40): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204136953.236:41): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204136953.236:42): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204137019.263:43): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=4152 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204137019.321:44): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4287 comm="klauncher" sig=6 >type=ANOM_ABEND msg=audit(1204137035.062:45): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=4431 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204137035.124:46): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4563 comm="klauncher" sig=6 >type=ANOM_ABEND msg=audit(1204137071.058:47): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=4743 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204137071.088:48): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4873 comm="klauncher" sig=6 >type=USER_AUTH msg=audit(1204137599.351:49): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204137599.353:50): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204137599.353:51): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204137599.354:52): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204137599.354:53): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204137599.354:54): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204137621.812:55): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204137621.813:56): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204137621.813:57): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204137621.813:58): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204137640.158:59): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204137640.159:60): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204137640.159:61): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204137640.159:62): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204137720.167:63): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=13384 comm="klauncher" sig=6 >type=USER_AUTH msg=audit(1204137980.004:64): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204137980.007:65): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204137980.007:66): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204137980.008:67): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204137980.008:68): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204137980.009:69): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204138198.150:70): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204138198.151:71): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204138198.151:72): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204138198.152:73): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204138233.451:74): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204138233.452:75): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204138233.452:76): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204138233.452:77): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204138245.159:78): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204138245.160:79): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204138245.160:80): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204138245.160:81): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204138253.965:82): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204138253.966:83): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204138253.966:84): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204138253.967:85): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204138330.098:86): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204138330.099:87): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204138330.099:88): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204138330.099:89): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204138510.833:90): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_ACCT msg=audit(1204138510.835:91): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_START msg=audit(1204138510.836:92): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=CRED_ACQ msg=audit(1204138510.837:93): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_LOGIN msg=audit(1204138510.837:94): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=ANOM_ABEND msg=audit(1204138709.217:95): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4719 comm="klauncher" sig=6 >type=USER_ACCT msg=audit(1204138861.589:96): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204138861.591:97): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204138861.591:98): login pid=24636 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204138861.639:99): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204138861.917:100): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204138861.918:101): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204140117.318:102): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204140117.321:103): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204140117.321:104): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204140117.323:105): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204140117.323:106): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204140117.323:107): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs3/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204140228.538:108): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204140228.538:109): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204140228.539:110): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204140228.539:111): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204140357.148:112): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204140357.151:113): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204140357.163:114): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140357.164:115): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140357.164:116): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140357.164:117): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204140377.768:118): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140377.769:119): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140377.769:120): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140377.769:121): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1204140469.802:122): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=30242 comm="klauncher" sig=6 >type=CRED_ACQ msg=audit(1204140590.213:123): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140590.214:124): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140590.214:125): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140590.215:126): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204140596.531:127): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140596.532:128): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140596.532:129): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140596.532:130): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204140654.888:131): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140654.888:132): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140654.888:133): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140654.889:134): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204140847.199:135): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140847.200:136): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140847.200:137): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140847.200:138): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204140861.752:139): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204140861.754:140): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204140861.763:141): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204140861.763:142): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1204140861.763:143): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204140929.055:144): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204140929.056:145): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204140929.056:146): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204140929.056:147): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204141738.314:148): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_ACCT msg=audit(1204141738.317:149): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_START msg=audit(1204141738.318:150): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=CRED_ACQ msg=audit(1204141738.318:151): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_LOGIN msg=audit(1204141738.319:152): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=ANOM_ABEND msg=audit(1204141988.422:153): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=23098 comm="klauncher" sig=6 >type=USER_ACCT msg=audit(1204142461.277:154): user pid=30090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204142461.278:155): user pid=30090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204142461.278:156): login pid=30090 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204142461.364:157): user pid=30090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204142461.593:158): user pid=30090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204142461.594:159): user pid=30090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1204142551.948:160): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204142551.948:161): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1204142612.788:162): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204142612.788:163): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204142613.648:164): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204142613.648:165): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204142915.365:166): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204142915.368:167): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204142915.389:168): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204142915.390:169): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204142915.390:170): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204142915.391:171): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143017.515:172): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143017.516:173): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143017.516:174): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143017.517:175): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143124.814:176): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143124.814:177): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143124.814:178): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143124.815:179): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1204143131.920:180): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204143131.921:181): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204143140.251:182): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143140.252:183): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143140.252:184): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143140.252:185): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143151.286:186): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143151.286:187): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143151.287:188): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143151.287:189): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143160.611:190): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143160.612:191): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143160.612:192): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143160.613:193): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143169.367:194): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143169.368:195): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143169.368:196): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143169.369:197): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143212.242:198): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143212.243:199): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143212.243:200): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143212.243:201): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143226.822:202): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143226.823:203): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143226.823:204): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143226.823:205): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143235.065:206): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143235.066:207): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143235.066:208): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143235.066:209): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204143266.362:210): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143266.363:211): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143266.363:212): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143266.363:213): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204143420.866:214): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204143420.869:215): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204143420.870:216): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204143420.871:217): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204143420.871:218): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204143420.872:219): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs3/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204143565.116:220): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204143565.117:221): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204143565.117:222): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204143565.118:223): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=AVC msg=audit(1204143648.285:224): avc: denied { getattr } for pid=21229 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204143648.285:224): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fff54ab9420 a2=7fff54ab9420 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204143648.285:225): avc: denied { search } for pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204143648.285:225): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fff54ab9120 a2=0 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204143648.285:226): avc: denied { read } for pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204143648.285:226): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204143648.294:227): avc: denied { getattr } for pid=21229 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163383 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204143648.294:227): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff54ab9290 a2=7fff54ab9290 a3=3688d529f0 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204143648.294:228): avc: denied { setattr } for pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204143648.294:228): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff54ab9320 a2=3688d529d8 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204143648.295:229): avc: denied { rmdir } for pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204143648.295:229): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204143648.410:230): avc: denied { getattr } for pid=21229 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1204143648.410:230): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff54ab9290 a2=7fff54ab9290 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=ANOM_ABEND msg=audit(1204143812.490:231): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=21561 comm="klauncher" sig=11 >type=ANOM_ABEND msg=audit(1204143962.096:232): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=24917 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204143962.169:233): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=25093 comm="klauncher" sig=11 >type=ANOM_ABEND msg=audit(1204143962.257:234): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=25294 comm="gpg" sig=11 >type=USER_AUTH msg=audit(1204144061.884:235): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204144065.412:236): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204144065.414:237): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204144065.423:238): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204144065.437:239): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204144065.437:240): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204144065.437:241): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames3/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204144803.653:242): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204144803.655:243): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204144803.681:244): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204144803.709:245): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204144803.709:246): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204144803.709:247): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204144876.125:248): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204144876.125:249): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204144876.126:250): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204144876.126:251): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204145082.705:252): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204145082.707:253): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204145082.707:254): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204145082.708:255): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204145082.708:256): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204145082.709:257): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase3/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1204145464.304:258): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=20594 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204145464.330:259): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=20724 comm="klauncher" sig=11 >type=USER_AUTH msg=audit(1204145529.293:260): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204145529.295:261): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204145529.302:262): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204145529.303:263): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204145529.303:264): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1204145529.304:265): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty3 res=success)' >type=ANOM_ABEND msg=audit(1204145559.009:266): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=21443 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204145559.045:267): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=21573 comm="klauncher" sig=11 >type=USER_AUTH msg=audit(1204145601.045:268): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204145601.048:269): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204145601.048:270): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204145601.049:271): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204145601.049:272): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204145601.049:273): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames/devel" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204145692.226:274): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=24072 comm="thunderbird-bin" sig=6 >type=ANOM_ABEND msg=audit(1204145823.331:275): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=23461 comm="klauncher" sig=11 >type=USER_ACCT msg=audit(1204146061.748:276): user pid=30771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204146061.749:277): user pid=30771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204146061.749:278): login pid=30771 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204146061.823:279): user pid=30771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204146062.052:280): user pid=30771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204146062.053:281): user pid=30771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204146553.461:282): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204146553.463:283): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204146553.464:284): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204146553.465:285): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204146553.465:286): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204146553.466:287): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204146773.429:288): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=6273 comm="klauncher" sig=11 >type=USER_AUTH msg=audit(1204146846.734:289): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204146846.734:290): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204146846.734:291): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=CRED_ACQ msg=audit(1204146849.751:292): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204146849.752:293): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204146849.752:294): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204146849.752:295): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames/devel/x86_64" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204146849.759:296): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204146849.759:297): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204146849.874:298): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204146849.877:299): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1204146849.878:300): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1204146849.878:301): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=USER_END msg=audit(1204146849.887:302): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204146849.888:303): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204146849.889:304): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1204146849.889:305): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=USER_END msg=audit(1204146849.890:306): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)' >type=AVC msg=audit(1204146849.890:307): avc: denied { unlink } for pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=327517 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=USER_END msg=audit(1204146849.891:308): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)' >type=SYSCALL msg=audit(1204146849.890:307): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff85509f90 a2=7fff85509e60 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1204146861.561:1195): auditd normal halt, sending auid=4294967295 pid=7416 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204146938.597:6937): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2066 res=success >type=CONFIG_CHANGE msg=audit(1204146938.697:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204146938.697:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204146939.159:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204146939.159:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204146940.199:8): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204146940.199:9): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204146941.790:10): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204146941.790:11): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204146958.543:12): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204146958.545:13): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204146958.588:14): avc: denied { create } for pid=2753 comm="ssh-agent" name="agent.2753" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204146958.588:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff29c994f0 a2=6e a3=0 items=0 ppid=2645 pid=2753 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204146958.590:15): avc: denied { write } for pid=2645 comm="login" name="agent.2753" dev=dm-0 ino=435179 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204146958.590:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff07089400 a2=6e a3=0 items=0 ppid=1 pid=2645 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1204146958.590:16): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204146958.600:17): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204146958.611:18): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204147273.276:19): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204147273.278:20): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147273.279:21): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147273.281:22): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147273.281:23): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147273.281:24): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204147321.376:25): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204147321.379:26): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204147321.380:27): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204147321.380:28): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204147321.380:29): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204147413.947:30): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147413.948:31): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147413.948:32): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147413.948:33): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147426.346:34): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147426.346:35): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147426.346:36): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147426.347:37): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147432.755:38): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147432.756:39): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147432.756:40): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147432.756:41): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147489.745:42): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147489.746:43): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147489.746:44): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147489.747:45): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147523.223:46): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147523.223:47): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147523.223:48): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147523.224:49): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147550.272:50): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147550.272:51): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147550.272:52): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147550.273:53): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147654.471:54): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147654.472:55): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147654.472:56): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147654.472:57): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147676.936:58): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147676.937:59): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147676.937:60): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147676.937:61): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147683.108:62): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147683.109:63): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147683.109:64): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147683.109:65): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147699.294:66): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147699.294:67): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147699.294:68): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147699.295:69): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204147729.784:70): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204147729.784:71): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204147729.784:72): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204147729.785:73): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148008.149:74): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148008.150:75): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148008.150:76): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148008.151:77): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148050.876:78): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148050.876:79): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148050.876:80): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148050.877:81): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148079.227:82): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148079.228:83): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148079.228:84): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148079.228:85): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148107.193:86): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148107.193:87): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148107.193:88): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148107.194:89): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148141.408:90): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148141.409:91): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148141.409:92): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148141.409:93): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148149.656:94): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148149.657:95): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148149.657:96): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148149.657:97): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148208.678:98): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148208.679:99): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148208.679:100): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148208.679:101): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148255.689:102): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148255.689:103): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148255.689:104): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148255.690:105): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148317.638:106): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148317.639:107): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148317.639:108): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148317.640:109): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148330.074:110): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148330.075:111): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148330.075:112): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148330.075:113): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148344.852:114): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148344.853:115): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148344.853:116): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148344.853:117): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148357.531:118): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148357.532:119): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148357.532:120): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148357.533:121): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148481.955:122): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148481.956:123): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148481.956:124): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148481.957:125): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148489.200:126): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148489.201:127): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148489.201:128): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148489.202:129): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148498.502:130): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148498.503:131): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148498.503:132): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148498.503:133): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148505.302:134): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148505.302:135): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148505.302:136): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148505.303:137): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204148514.131:138): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=5332 comm="X" sig=6 >type=CRED_ACQ msg=audit(1204148607.136:139): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148607.137:140): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148607.137:141): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148607.137:142): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204148644.241:143): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204148644.242:144): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204148644.242:145): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204148644.242:146): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204148741.916:147): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=6178 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204148798.097:148): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=6865 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204148798.138:149): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=7080 comm="gpg" sig=11 >type=USER_AUTH msg=audit(1204148894.856:150): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204148894.859:151): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204148894.860:152): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204148894.861:153): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204148894.861:154): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204148894.861:155): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd="/bin/chmod" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204149013.665:156): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204149013.667:157): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149013.668:158): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149013.668:159): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149013.669:160): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149013.669:161): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/emacs" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149054.769:162): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149054.770:163): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149054.770:164): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149054.770:165): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149072.486:166): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204149072.487:167): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204149072.487:168): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204149072.488:169): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204149091.977:170): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204149091.978:171): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204149091.978:172): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204149091.978:173): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204149661.758:174): user pid=10589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204149661.759:175): user pid=10589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204149661.759:176): login pid=10589 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204149661.784:177): user pid=10589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204149661.896:178): user pid=10589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204149661.897:179): user pid=10589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204149730.091:180): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204149730.093:181): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149730.094:182): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149730.095:183): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149730.095:184): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149730.096:185): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1204149763.640:186): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=10852 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204149775.731:187): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=11474 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204149816.240:188): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=12744 comm="thunderbird-bin" sig=6 >type=ANOM_ABEND msg=audit(1204149816.309:189): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=12752 comm="firefox-bin" sig=6 >type=USER_AUTH msg=audit(1204149870.546:190): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204149870.546:191): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204149870.568:192): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204149874.562:193): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1204149910.133:194): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=12895 comm="X" sig=6 >type=CRED_ACQ msg=audit(1204149926.883:195): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149926.884:196): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149926.884:197): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149926.885:198): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149963.005:199): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149963.005:200): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149963.006:201): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149963.006:202): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149970.503:203): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149970.504:204): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149970.504:205): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149970.505:206): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149981.472:207): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149981.473:208): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149981.473:209): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149981.474:210): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204149988.563:211): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204149988.563:212): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204149988.564:213): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204149988.564:214): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204150362.763:215): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204150362.765:216): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204150362.766:217): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204150362.767:218): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204150362.767:219): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204150362.767:220): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204150433.787:221): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204150433.790:222): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204150433.791:223): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204150433.792:224): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204150433.792:225): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CMD msg=audit(1204150433.792:226): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204150577.161:227): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204150577.162:228): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204150577.163:229): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CMD msg=audit(1204150577.163:230): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204150648.294:231): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204150648.295:232): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204150648.295:233): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CMD msg=audit(1204150648.296:234): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204150880.735:235): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204150880.736:236): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204150880.736:237): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CMD msg=audit(1204150880.737:238): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1204152322.127:239): user pid=20050 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204152322.127:240): user pid=20050 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204152322.128:241): user pid=20050 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204152327.694:242): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204152327.697:243): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204152327.697:244): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204152327.698:245): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204152327.699:246): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204152327.699:247): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204152327.705:248): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204152327.706:249): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204152327.778:250): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204152327.779:251): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204152327.781:252): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204152327.782:253): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1204152327.782:254): avc: denied { unlink } for pid=2754 comm="ssh-agent" name="agent.2753" dev=dm-0 ino=435179 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204152327.782:254): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff29c98d00 a2=7fff29c98bd0 a3=0 items=0 ppid=1 pid=2754 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1204152335.876:6938): auditd normal halt, sending auid=4294967295 pid=20465 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204216330.919:9155): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2070 res=success >type=CONFIG_CHANGE msg=audit(1204216331.019:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204216331.019:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204216331.607:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204216331.607:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204216332.648:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204216332.648:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204216334.189:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204216334.189:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204216357.327:12): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204216357.330:13): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204216357.373:14): avc: denied { create } for pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204216357.373:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff5ec5a9f0 a2=6e a3=0 items=0 ppid=2658 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204216357.374:15): avc: denied { write } for pid=2658 comm="login" name="agent.2766" dev=dm-0 ino=328035 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204216357.374:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff1ef1a290 a2=6e a3=0 items=0 ppid=1 pid=2658 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1204216357.375:16): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204216357.384:17): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204216357.395:18): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204216367.338:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204216367.340:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204216367.499:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204216367.500:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204216367.500:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204216367.501:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204216840.634:25): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204216840.636:26): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204216840.638:27): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204216840.638:28): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204216840.638:29): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204216890.358:30): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204216890.360:31): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204216890.361:32): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204216890.362:33): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204216890.362:34): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204216890.363:35): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1204217108.493:36): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4671 comm="a+" sig=6 >type=ANOM_ABEND msg=audit(1204217113.917:37): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4673 comm="a+" sig=6 >type=ANOM_ABEND msg=audit(1204217122.130:38): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4681 comm="a+" sig=6 >type=ANOM_ABEND msg=audit(1204217134.670:39): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=5059 comm="a+" sig=6 >type=USER_AUTH msg=audit(1204217357.360:40): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204217357.362:41): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204217357.364:42): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204217357.364:43): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1204217357.364:44): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1204217369.285:45): user pid=19001 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_AUTH msg=audit(1204217375.591:46): user pid=30196 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=failed)' >type=USER_AUTH msg=audit(1204217382.650:47): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204217382.652:48): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204217382.676:49): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204217382.678:50): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1204217453.802:51): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204217453.803:52): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)' >type=ANOM_ABEND msg=audit(1204217511.485:53): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=2962 comm="X" sig=6 >type=ANOM_ABEND msg=audit(1204217536.542:54): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=11280 comm="X" sig=6 >type=USER_AUTH msg=audit(1204217565.196:55): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204217565.198:56): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204217565.199:57): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204217565.200:58): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204217565.200:59): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204217565.200:60): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204217940.986:61): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204217940.989:62): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204217940.989:63): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204217940.990:64): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204217940.990:65): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204217940.991:66): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204218061.146:67): user pid=30395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204218061.148:68): user pid=30395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204218061.148:69): login pid=30395 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204218061.161:70): user pid=30395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204218061.344:71): user pid=30395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204218061.345:72): user pid=30395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204218117.690:73): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204218117.693:74): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204218117.693:75): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204218117.694:76): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204218117.694:77): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204218117.694:78): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204218131.127:79): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204218131.128:80): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204218131.128:81): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204218131.128:82): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204218204.890:83): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204218204.891:84): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204218204.891:85): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204218204.891:86): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204218266.540:87): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204218266.541:88): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204218266.541:89): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204218266.541:90): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1204218605.910:91): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=31029 comm="a+" sig=6 >type=ANOM_ABEND msg=audit(1204218708.229:92): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=31123 comm="a+" sig=6 >type=USER_AUTH msg=audit(1204220773.088:93): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1204220773.091:94): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1204220773.120:95): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1204220773.137:96): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204220773.137:97): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_CMD msg=audit(1204220773.137:98): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/0 res=success)' >type=USER_CMD msg=audit(1204220883.957:99): user pid=15254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="tauch" (terminal=pts/0 res=failed)' >type=CRED_ACQ msg=audit(1204220898.991:100): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1204220898.997:101): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204220899.000:102): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_CMD msg=audit(1204220899.000:103): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/touch" (terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1204221105.130:104): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204221105.133:105): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204221105.133:106): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204221105.134:107): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204221105.134:108): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204221105.135:109): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204221218.075:110): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1204221218.078:111): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1204221218.123:112): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1204221218.123:113): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_LOGIN msg=audit(1204221218.175:114): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1204221661.405:115): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204221661.407:116): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204221661.407:117): login pid=13631 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204221661.433:118): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204221661.662:119): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204221661.663:120): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_START msg=audit(1204221921.777:121): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204221921.777:122): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1204221931.910:123): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204221931.911:124): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204221932.058:125): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1204221932.058:126): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1204222187.793:127): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204222187.793:128): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204222537.402:129): avc: denied { getattr } for pid=18907 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204222537.402:129): arch=c000003e syscall=6 success=yes exit=0 a0=6043bb a1=7fff56a3e3a0 a2=7fff56a3e3a0 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204222537.402:130): avc: denied { search } for pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204222537.402:130): arch=c000003e syscall=80 success=yes exit=0 a0=6043bb a1=7fff56a3e0a0 a2=0 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204222537.402:131): avc: denied { read } for pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204222537.402:131): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204222537.411:132): avc: denied { getattr } for pid=18907 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163383 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204222537.411:132): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff56a3e210 a2=7fff56a3e210 a3=3688d529f0 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204222537.411:133): avc: denied { setattr } for pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204222537.411:133): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff56a3e2a0 a2=3688d529d8 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204222537.411:134): avc: denied { rmdir } for pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir >type=SYSCALL msg=audit(1204222537.411:134): arch=c000003e syscall=84 success=no exit=-39 a0=6043bb a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=AVC msg=audit(1204222537.543:135): avc: denied { getattr } for pid=18907 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file >type=SYSCALL msg=audit(1204222537.543:135): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff56a3e210 a2=7fff56a3e210 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1204225261.987:136): user pid=9057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204225261.988:137): user pid=9057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204225261.988:138): login pid=9057 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204225262.204:139): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204225262.527:140): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204225262.528:141): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204226229.973:142): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204226229.976:143): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204226230.041:144): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204226230.047:145): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204226230.047:146): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204226230.047:147): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204226370.058:148): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204226370.059:149): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204226370.059:150): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204226370.059:151): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204227558.785:152): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1204227558.788:153): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_ACQ msg=audit(1204227558.820:154): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_START msg=audit(1204227558.834:155): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1204227558.834:156): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_CMD msg=audit(1204227558.834:157): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/luma/devel/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)' >type=USER_ACCT msg=audit(1204228861.916:158): user pid=31868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204228861.917:159): user pid=31868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204228861.917:160): login pid=31868 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204228862.094:161): user pid=31868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204228862.431:162): user pid=31868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204228862.432:163): user pid=31868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204229709.497:164): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204229709.499:165): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204229709.569:166): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204229709.575:167): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204229709.575:168): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204229709.575:169): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204229787.282:170): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204229787.283:171): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204229787.283:172): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204229787.284:173): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/usr/bin/yum" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204229983.562:174): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204229983.563:175): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204229983.564:176): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204229983.564:177): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204230037.117:178): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204230037.118:179): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204230037.118:180): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204230037.119:181): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204230048.833:182): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204230048.834:183): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204230048.834:184): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204230048.835:185): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204230069.959:186): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204230069.960:187): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204230069.960:188): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204230069.960:189): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204230083.219:190): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204230083.220:191): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204230083.220:192): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204230083.221:193): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204230095.129:194): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204230095.129:195): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204230095.130:196): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204230095.130:197): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204230101.892:198): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204230101.893:199): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204230101.893:200): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_CMD msg=audit(1204230101.893:201): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204231865.901:202): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204231865.903:203): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204231865.903:204): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204231865.905:205): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204231865.905:206): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204231865.905:207): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204231866.298:208): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204231866.298:209): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204231866.987:210): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=USER_END msg=audit(1204231867.083:211): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)' >type=CRED_DISP msg=audit(1204231867.115:212): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204231867.138:213): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1204231867.199:214): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1204231867.229:215): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1204231867.259:216): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204231867.264:217): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204231867.383:218): avc: denied { unlink } for pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=328035 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204231867.383:218): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff5ec5a200 a2=7fff5ec5a0d0 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1204231885.520:9156): auditd normal halt, sending auid=4294967295 pid=8543 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204232517.295:4725): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2120 res=success >type=CONFIG_CHANGE msg=audit(1204232517.395:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204232517.395:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204232517.732:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204232517.732:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204232518.499:9): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204232518.499:10): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204232519.684:11): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204232519.684:12): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204232555.469:13): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204232555.474:14): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204232555.474:15): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1204232555.507:16): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204232555.508:17): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)' >type=AVC msg=audit(1204232580.250:18): avc: denied { execheap } for pid=3324 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204232580.250:18): arch=c000003e syscall=10 success=yes exit=0 a0=efe000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3324 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204232999.770:19): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1204232999.779:20): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204233003.273:21): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204233003.276:22): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204233003.290:23): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204233003.297:24): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204233003.297:25): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204233922.034:26): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1204233922.036:27): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1204233922.053:28): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1204233922.060:29): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1204233922.072:30): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1204235481.195:31): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204235481.198:32): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204235481.199:33): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204235481.199:34): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_LOGIN msg=audit(1204235481.200:35): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_AUTH msg=audit(1204235557.411:36): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204235557.414:37): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204235557.415:38): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204235557.416:39): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204235557.416:40): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1204235557.417:41): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/common" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=CRED_ACQ msg=audit(1204235633.793:42): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_START msg=audit(1204235633.794:43): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204235633.794:44): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_CMD msg=audit(1204235633.795:45): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/common" cmd="/usr/bin/yum" (terminal=tty3 res=success)' >type=USER_ACCT msg=audit(1204236061.787:46): user pid=15241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204236061.788:47): user pid=15241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204236061.789:48): login pid=15241 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204236061.813:49): user pid=15241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204236061.967:50): user pid=15241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204236061.968:51): user pid=15241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204236655.643:52): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204236655.643:53): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204236655.893:54): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204236655.893:55): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=USER_END msg=audit(1204236655.894:56): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204236655.895:57): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)' >type=CRED_DISP msg=audit(1204236655.897:58): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=AVC msg=audit(1204236655.898:59): avc: denied { signal } for pid=2786 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204236655.898:59): arch=c000003e syscall=62 success=yes exit=0 a0=b91 a1=f a2=b91 a3=0 items=0 ppid=1 pid=2786 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1204236655.900:60): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=ANOM_ABEND msg=audit(1204236657.127:61): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2791 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1204236666.043:4726): auditd normal halt, sending auid=4294967295 pid=16738 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204482520.300:5688): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2069 res=success >type=CONFIG_CHANGE msg=audit(1204482520.400:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204482520.400:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204482520.839:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204482520.839:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204482521.597:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_ACQ msg=audit(1204482521.597:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=CRED_DISP msg=audit(1204482523.486:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_END msg=audit(1204482523.487:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)' >type=USER_AUTH msg=audit(1204482540.505:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204482540.507:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204482540.551:14): avc: denied { create } for pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204482540.551:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffcac9c8a0 a2=6e a3=0 items=0 ppid=2657 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204482540.552:15): avc: denied { write } for pid=2657 comm="login" name="agent.2766" dev=dm-0 ino=326793 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204482540.552:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffed59f910 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=USER_START msg=audit(1204482540.552:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204482540.562:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1204482540.573:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204482549.597:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204482549.600:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204482549.601:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204482549.601:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204482549.602:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204482549.602:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)' >type=AVC msg=audit(1204482843.902:25): avc: denied { read write } for pid=3209 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482843.902:25): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfd0 a1=2aaab2c03100 a2=0 a3=0 items=0 ppid=3204 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1204482844.365:26): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1204482844.047:27): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1204482844.047:27): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3204 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204482888.825:28): avc: denied { read write } for pid=3408 comm="useradd" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482888.825:28): arch=c000003e syscall=59 success=yes exit=0 a0=8ca6c0 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3407 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204482888.885:29): avc: denied { ioctl } for pid=3408 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482888.885:29): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff87074c30 a3=2aaaaf5ced32 items=0 ppid=3407 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204482888.885:30): avc: denied { getattr } for pid=3408 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482888.885:30): arch=c000003e syscall=6 success=yes exit=0 a0=7fff870792d0 a1=7fff87074e40 a2=7fff87074e40 a3=2aaaaf5ced32 items=0 ppid=3407 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null) >type=USER_CHAUTHTOK msg=audit(1204482888.885:31): user pid=3408 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1204482910.951:32): avc: denied { connectto } for pid=3462 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204482910.951:32): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=414003d0 a2=19 a3=0 items=0 ppid=1 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204482930.102:33): user pid=3490 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1204482937.586:34): avc: denied { read write } for pid=3492 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482937.586:34): arch=c000003e syscall=59 success=yes exit=0 a0=1c26a40 a1=17b0f50 a2=0 a3=2aaaaaaeb210 items=0 ppid=3491 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1204482938.020:35): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1204482937.711:36): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1204482937.711:36): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3491 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204482938.420:37): user pid=3491 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204482945.853:38): avc: denied { read write } for pid=3503 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482945.853:38): arch=c000003e syscall=59 success=yes exit=0 a0=185e240 a1=91753f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3500 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1204482946.288:39): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1204482945.978:40): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1204482945.978:40): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3500 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204482946.670:41): user pid=3500 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1204482947.896:42): user pid=3506 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)' >type=AVC msg=audit(1204482956.323:43): avc: denied { read write } for pid=3514 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482956.323:43): arch=c000003e syscall=59 success=yes exit=0 a0=1c26a40 a1=17b0f50 a2=0 a3=2aaaaaaeb210 items=0 ppid=3507 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1204482956.758:44): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1204482956.449:45): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1204482956.449:45): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3507 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204482957.142:46): user pid=3507 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204482964.544:47): avc: denied { read write } for pid=3523 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file >type=SYSCALL msg=audit(1204482964.544:47): arch=c000003e syscall=59 success=yes exit=0 a0=185e240 a1=91753f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3516 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1204482964.978:48): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1204482964.669:49): policy loaded auid=4294967295 >type=SYSCALL msg=audit(1204482964.669:49): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3516 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204482965.360:50): user pid=3516 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204483343.779:51): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204483343.780:52): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204483343.780:53): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1204483366.053:54): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204483366.055:55): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1204483366.056:56): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1204483366.057:57): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204483366.057:58): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_CMD msg=audit(1204483366.057:59): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1204483366.064:60): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1204483366.064:61): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1204483366.138:62): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1204483366.138:63): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=AVC msg=audit(1204483366.138:64): avc: denied { unlink } for pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=326793 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1204483366.138:64): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffcac9c0b0 a2=7fffcac9bf80 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) >type=DAEMON_END msg=audit(1204483372.828:5689): auditd normal halt, sending auid=4294967295 pid=4241 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204483453.591:2339): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2073 res=success >type=CONFIG_CHANGE msg=audit(1204483453.690:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204483453.690:5): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204483454.027:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204483454.027:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1204483455.275:8): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1204483455.275:9): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1204483456.675:10): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204483456.675:11): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1204483488.496:12): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204483488.501:13): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204483488.511:14): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_START msg=audit(1204483488.559:15): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204483488.560:16): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)' >type=AVC msg=audit(1204483528.915:17): avc: denied { execheap } for pid=3298 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process >type=SYSCALL msg=audit(1204483528.915:17): arch=c000003e syscall=10 success=yes exit=0 a0=eae000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3298 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1204483565.518:18): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1204483565.521:19): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1204483565.576:20): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1204483565.576:21): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 430932
:
293457
| 296518 |
296519
|
296626