Attachment 296518 Details for Bug 430932 – The audit log

The audit log

audit.log (text/plain), 1.44 MB, created by Jochen Schmitt on 2008-03-02 18:49:46 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jochen Schmitt

Created: 2008-03-02 18:49:46 UTC

Size: 1.44 MB

patch

obsolete

>type=USER_ACCT msg=audit(1199732461.416:68): user pid=3093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199732461.417:69): user pid=3093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199732461.417:70): login pid=3093 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199732461.431:71): user pid=3093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199732461.455:72): user pid=3093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199732461.456:73): user pid=3093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199736061.639:74): user pid=28420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199736061.641:75): user pid=28420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199736061.641:76): login pid=28420 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199736061.664:77): user pid=28420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199736061.697:78): user pid=28420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199736061.698:79): user pid=28420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1199739661.879:80): user pid=18690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199739661.880:81): user pid=18690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199739661.880:82): login pid=18690 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199739661.917:83): user pid=18690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199739661.945:84): user pid=18690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199739661.946:85): user pid=18690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199742706.636:86): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199742706.651:87): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199742827.678:88): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199742827.681:89): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199742827.705:90): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199742827.705:91): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199742827.705:92): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1199742855.827:93): user pid=30575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199742856.729:94): user pid=30595 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199742856.752:95): user pid=30600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199742857.583:96): user pid=30629 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1199742857.617:97): user pid=30633 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1199742857.652:98): user pid=30637 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199742857.692:99): user pid=30644 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199742857.692:100): user pid=30644 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199743056.145:101): user pid=30912 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199743056.151:102): user pid=30916 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199743058.503:103): user pid=30941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1199743074.401:104): user pid=31413 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199743262.018:105): user pid=8744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199743262.020:106): user pid=8744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199743262.020:107): login pid=8744 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199743262.069:108): user pid=8744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199743262.259:109): user pid=8744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199743262.260:110): user pid=8744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1199743297.991:111): auid=4294967295 uid=500 gid=101 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 pid=19139 comm="lt-gst" sig=11
>type=USER_AUTH msg=audit(1199744228.257:112): user pid=20501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199744228.257:113): user pid=20501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199744228.257:114): user pid=20501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199744232.655:115): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199744232.658:116): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199744232.687:117): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199744232.687:118): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199744235.571:119): user pid=20853 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199744235.571:120): user pid=20853 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199744236.185:121): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199744236.186:122): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199744236.187:123): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199744236.187:124): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199744236.187:125): user pid=30181 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199744236.188:126): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1199744236.188:127): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1199744236.188:128): avc:  denied  { unlink } for  pid=3009 comm="ssh-agent" name="agent.3008" dev=dm-0 ino=300660 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=USER_END msg=audit(1199744236.190:129): user pid=20502 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=SYSCALL msg=audit(1199744236.188:128): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff8563dbb0 a2=7fff8563da80 a3=0 items=0 ppid=1 pid=3009 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1199744248.716:9707): auditd normal halt, sending auid=4294967295 pid=21367 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2142
>type=DAEMON_START msg=audit(1199804801.148:7599): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2142 res=success, auditd pid=2142
>type=CONFIG_CHANGE msg=audit(1199804801.248:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199804801.248:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199804801.284:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199804801.284:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199804805.676:8): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199804805.676:9): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199804807.407:10): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199804807.408:11): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199804855.126:12): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1199804855.126:13): avc:  denied  { write } for  pid=2898 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199804855.126:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=1ee4e a3=4000 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199804855.126:14): avc:  denied  { lock } for  pid=2898 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199804855.126:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffec798b60 a3=8 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199804855.126:15): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199804859.789:16): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199804859.804:17): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199804859.856:18): avc:  denied  { create } for  pid=3012 comm="ssh-agent" name="agent.3012" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199804859.856:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff3abb5b20 a2=6e a3=0 items=0 ppid=2898 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199804859.858:19): avc:  denied  { write } for  pid=2898 comm="login" name="agent.3012" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199804859.858:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffec796b20 a2=6e a3=0 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199804859.858:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199804859.866:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199804859.878:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199804870.909:23): user pid=3135 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199804870.911:24): user pid=3135 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199804888.653:25): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199804888.655:26): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199804888.703:27): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199804888.703:28): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199804938.177:29): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199804938.178:30): user pid=3198 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199807347.108:31): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199807347.110:32): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199807347.112:33): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199807347.112:34): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199807347.112:35): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199807511.053:36): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199807511.056:37): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199807511.063:38): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199807511.063:39): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199807532.346:40): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199807532.347:41): user pid=7116 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199807660.398:42): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199807660.399:43): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199808061.807:44): user pid=8663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199808061.808:45): user pid=8663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199808061.808:46): login pid=8663 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199808061.823:47): user pid=8663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199808061.952:48): user pid=8663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199808061.953:49): user pid=8663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199808167.924:50): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199808167.928:51): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199808167.929:52): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199808167.929:53): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199808167.929:54): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199810348.945:55): user pid=19020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199810348.945:56): user pid=19020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199810348.945:57): user pid=19020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199810354.946:58): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199810354.948:59): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199810354.953:60): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199810354.954:61): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199810356.870:62): user pid=19372 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199810356.870:63): user pid=19372 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199810356.932:64): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199810356.933:65): user pid=7668 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199810356.934:66): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199810356.934:67): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199810356.935:68): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199810356.938:69): user pid=19021 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1199810356.948:70): avc:  denied  { unlink } for  pid=3013 comm="ssh-agent" name="agent.3012" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199810356.948:70): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff3abb5330 a2=7fff3abb5200 a3=0 items=0 ppid=1 pid=3013 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1199810366.096:7600): auditd normal halt, sending auid=4294967295 pid=19868 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2142
>type=DAEMON_START msg=audit(1199819731.870:3153): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2141 res=success, auditd pid=2141
>type=CONFIG_CHANGE msg=audit(1199819731.969:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199819731.969:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199819731.997:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199819731.997:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199819736.397:8): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199819736.397:9): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199819738.137:10): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199819738.138:11): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199819753.854:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199819753.872:13): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199819753.924:14): avc:  denied  { create } for  pid=3006 comm="ssh-agent" name="agent.3006" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199819753.924:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffcd5f6550 a2=6e a3=0 items=0 ppid=2896 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199819753.925:15): avc:  denied  { write } for  pid=2896 comm="login" name="agent.3006" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199819753.925:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffa5e741f0 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1199819753.926:16): login pid=2896 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1199819753.936:17): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199819753.940:18): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199819753.950:19): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199819753.950:20): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199819871.342:21): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199819871.343:22): avc:  denied  { unlink } for  pid=3007 comm="ssh-agent" name="agent.3006" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199819871.343:22): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffcd5f5d60 a2=7fffcd5f5c30 a3=0 items=0 ppid=1 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1199819871.344:23): user pid=2896 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199819878.860:24): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1199819878.860:25): avc:  denied  { write } for  pid=3534 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199819878.860:25): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=d21ca a3=4000 items=0 ppid=1 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199819878.860:26): avc:  denied  { lock } for  pid=3534 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199819878.860:26): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fff9f0a5460 a3=8 items=0 ppid=1 pid=3534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199819878.867:27): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=s45604kr: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199819883.154:28): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199819883.156:29): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199819883.161:30): avc:  denied  { create } for  pid=3551 comm="ssh-agent" name="agent.3551" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199819883.161:30): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fffa9000cf0 a2=6e a3=0 items=0 ppid=3534 pid=3551 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199819883.162:31): avc:  denied  { write } for  pid=3534 comm="login" name="agent.3551" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199819883.162:31): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff9f0a3420 a2=6e a3=0 items=0 ppid=1 pid=3534 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199819883.163:32): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199819883.163:33): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199819883.171:34): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199820623.721:35): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199820623.723:36): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199820623.739:37): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199820623.739:38): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199820664.547:39): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199820664.548:40): user pid=5038 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199820669.400:41): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199820669.402:42): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199820669.415:43): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199820669.415:44): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199820686.809:45): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199820686.810:46): user pid=5416 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199820697.721:47): user pid=5565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199820702.742:48): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199820702.744:49): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199820702.755:50): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199820702.755:51): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199820915.986:52): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199820915.987:53): user pid=5574 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199821332.820:54): user pid=7005 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199821332.820:55): user pid=7005 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199821332.820:56): user pid=7005 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199821337.729:57): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199821337.731:58): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199821337.738:59): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199821337.738:60): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199821340.933:61): user pid=7357 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199821340.934:62): user pid=7357 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199821340.983:63): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199821340.983:64): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199821340.984:65): user pid=3534 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199821340.984:66): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199821340.984:67): avc:  denied  { unlink } for  pid=3552 comm="ssh-agent" name="agent.3551" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199821340.984:67): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffa9000500 a2=7fffa90003d0 a3=0 items=0 ppid=1 pid=3552 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1199821350.349:3154): auditd normal halt, sending auid=4294967295 pid=7860 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2141
>type=DAEMON_START msg=audit(1199822328.322:3288): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2146 res=success, auditd pid=2146
>type=CONFIG_CHANGE msg=audit(1199822328.422:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199822328.422:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199822328.458:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199822328.458:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199822332.899:8): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199822332.899:9): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199822334.573:10): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199822334.573:11): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199822351.310:12): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199822351.327:13): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199822351.380:14): avc:  denied  { create } for  pid=3015 comm="ssh-agent" name="agent.3015" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199822351.380:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff776cab50 a2=6e a3=0 items=0 ppid=2902 pid=3015 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199822351.381:15): avc:  denied  { write } for  pid=2902 comm="login" name="agent.3015" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199822351.381:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff49759ae0 a2=6e a3=0 items=0 ppid=1 pid=2902 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199822351.381:16): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199822351.390:17): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199822351.402:18): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199822461.923:19): user pid=3236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199822461.924:20): user pid=3236 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199822461.925:21): login pid=3236 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199822461.950:22): user pid=3236 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199822462.110:23): user pid=3236 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199822462.111:24): user pid=3236 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199822492.920:25): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199822492.923:26): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199822492.949:27): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199822492.949:28): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199822503.131:29): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199822503.132:30): user pid=3273 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=db2inst exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199822942.873:31): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199822942.874:32): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199822942.874:33): avc:  denied  { unlink } for  pid=3016 comm="ssh-agent" name="agent.3015" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199822942.874:33): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff776ca360 a2=7fff776ca230 a3=0 items=0 ppid=1 pid=3016 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1199822950.372:34): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199822950.375:35): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199822950.381:36): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199822950.382:37): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199822950.382:38): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199823821.952:39): user pid=6662 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199823821.952:40): user pid=6662 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199823821.952:41): user pid=6662 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199823830.250:42): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199823830.252:43): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199823830.258:44): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199823830.259:45): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199823908.423:46): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199823908.424:47): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199823908.424:48): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199823908.424:49): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199823908.431:50): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199823908.431:51): user pid=7069 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199823908.491:52): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199823908.492:53): user pid=5003 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199823908.496:54): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199823908.497:55): user pid=6669 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199823908.497:56): avc:  denied  { unlink } for  pid=5008 comm="ssh-agent" name="agent.5007" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199823908.497:56): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffde3bb8c0 a2=7fffde3bb790 a3=0 items=0 ppid=1 pid=5008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1199823917.735:3289): auditd normal halt, sending auid=4294967295 pid=7573 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2146
>type=DAEMON_START msg=audit(1199893615.857:7470): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2145 res=success, auditd pid=2145
>type=CONFIG_CHANGE msg=audit(1199893615.956:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199893615.956:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199893615.992:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199893615.992:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199893620.450:8): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199893620.450:9): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199893622.746:10): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199893622.746:11): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199893672.900:12): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1199893672.900:13): avc:  denied  { write } for  pid=2900 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199893672.900:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=dbf4c a3=4000 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199893672.900:14): avc:  denied  { lock } for  pid=2900 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199893672.900:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffbc6fff90 a3=8 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199893672.911:15): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199893677.218:16): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199893677.232:17): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199893677.284:18): avc:  denied  { create } for  pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199893677.284:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7ffff2b5c6b0 a2=6e a3=0 items=0 ppid=2900 pid=3010 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199893677.286:19): avc:  denied  { write } for  pid=2900 comm="login" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199893677.286:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffbc6fdf50 a2=6e a3=0 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199893677.286:20): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199893677.294:21): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199893677.307:22): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199893685.608:23): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199893685.610:24): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199893685.611:25): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199893685.612:26): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199893685.612:27): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199893685.613:28): user pid=3133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199893701.195:29): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199893701.196:30): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199893701.196:31): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199893701.196:32): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199893712.113:33): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199893712.114:34): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199893712.114:35): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199893712.114:36): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199893721.082:37): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199893721.084:38): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199893721.133:39): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199893721.133:40): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199893768.503:41): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199893768.504:42): user pid=3234 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199893790.470:43): user pid=3678 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199893790.470:44): user pid=3678 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199893790.470:45): user pid=3678 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=CRED_ACQ msg=audit(1199893794.762:46): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199893794.763:47): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199893794.763:48): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199893794.763:49): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199893794.769:50): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199893794.770:51): user pid=3679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199893794.836:52): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199893794.837:53): avc:  denied  { unlink } for  pid=3011 comm="ssh-agent" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199893794.837:53): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff2b5bec0 a2=7ffff2b5bd90 a3=0 items=0 ppid=1 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1199893794.837:54): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1199893803.064:7471): auditd normal halt, sending auid=4294967295 pid=4180 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2145
>type=DAEMON_START msg=audit(1199896716.687:2091): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2145 res=success, auditd pid=2145
>type=CONFIG_CHANGE msg=audit(1199896716.787:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199896716.787:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199896716.823:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199896716.823:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199896721.148:8): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199896721.148:9): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199896722.763:10): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199896722.764:11): user pid=2348 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199896741.598:12): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199896741.616:13): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199896741.668:14): avc:  denied  { create } for  pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199896741.668:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff4f3b85a0 a2=6e a3=0 items=0 ppid=2900 pid=3010 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199896741.670:15): avc:  denied  { write } for  pid=2900 comm="login" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199896741.670:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff314587e0 a2=6e a3=0 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199896741.670:16): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199896741.678:17): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199896741.691:18): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199896804.507:19): user pid=3199 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199896807.919:20): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199896807.922:21): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199896807.965:22): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199896807.965:23): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199896830.434:24): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199896830.435:25): user pid=3208 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199896834.419:26): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199896834.422:27): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199896834.435:28): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199896834.435:29): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199897035.559:30): avc:  denied  { associate } for  pid=4116 comm="lynx" name="L4116-2433TMP.bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199897035.559:30): arch=40000003 syscall=5 success=yes exit=4 a0=ffdf3798 a1=c1 a2=180 a3=ffdf3798 items=0 ppid=4062 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="lynx" exe="/usr/bin/lynx" subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1199897951.162:31): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199897951.165:32): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199897951.166:33): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199897951.167:34): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199897951.167:35): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199898062.032:36): user pid=5611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199898062.033:37): user pid=5611 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199898062.033:38): login pid=5611 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199898062.042:39): user pid=5611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199898062.170:40): user pid=5611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199898062.171:41): user pid=5611 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1199898206.224:42): avc:  denied  { associate } for  pid=4737 comm="lynx" name="L4737-5981TMP.bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199898206.224:42): arch=40000003 syscall=5 success=yes exit=4 a0=ff8ac758 a1=c1 a2=180 a3=ff8ac758 items=0 ppid=4062 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="lynx" exe="/usr/bin/lynx" subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1199898974.841:43): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199898974.844:44): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199898974.844:45): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199898974.846:46): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199898974.846:47): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1199898974.846:48): user pid=6508 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199899023.068:49): user pid=6593 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199899023.068:50): user pid=6593 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199899023.068:51): user pid=6593 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=CRED_ACQ msg=audit(1199899025.999:52): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199899026.000:53): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199899026.000:54): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1199899026.000:55): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199899026.006:56): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199899026.007:57): user pid=6600 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199899026.059:58): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199899026.060:59): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199899026.067:60): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1199899026.113:61): avc:  denied  { unlink } for  pid=3011 comm="ssh-agent" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199899026.113:61): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff4f3b7db0 a2=7fff4f3b7c80 a3=0 items=0 ppid=1 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1199899026.114:62): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199899026.116:63): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199899026.117:64): user pid=3577 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1199899035.221:2092): auditd normal halt, sending auid=4294967295 pid=7096 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2145
>type=DAEMON_START msg=audit(1199903103.276:7814): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2144 res=success, auditd pid=2144
>type=CONFIG_CHANGE msg=audit(1199903103.375:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199903103.375:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199903103.403:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199903103.403:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199903107.836:8): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199903107.836:9): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199903109.833:10): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199903109.834:11): user pid=2347 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199903128.180:12): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1199903128.180:13): avc:  denied  { write } for  pid=2899 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199903128.180:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=2c3d2 a3=4000 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199903128.180:14): avc:  denied  { lock } for  pid=2899 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199903128.180:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffd89bed80 a3=8 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199903128.188:15): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199903132.149:16): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199903132.169:17): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199903132.221:18): avc:  denied  { create } for  pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199903132.221:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fffaecd4f00 a2=6e a3=0 items=0 ppid=2899 pid=3010 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199903132.222:19): avc:  denied  { write } for  pid=2899 comm="login" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199903132.222:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffd89bcd40 a2=6e a3=0 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199903132.223:20): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199903132.231:21): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199903132.244:22): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199903218.461:23): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199903218.464:24): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199903218.512:25): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199903218.512:26): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199903249.376:27): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=AVC msg=audit(1199903249.376:28): avc:  denied  { write } for  pid=2900 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199903249.376:28): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=5c10d a3=4000 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty2 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199903249.376:29): avc:  denied  { lock } for  pid=2900 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199903249.376:29): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7fffcf786b40 a3=8 items=0 ppid=1 pid=2900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty2 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199903249.376:30): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199903266.370:31): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1199903266.370:32): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199903270.276:33): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199903270.279:34): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199903270.280:35): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199903270.280:36): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199903270.280:37): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199904731.878:38): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199904731.879:39): user pid=3245 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199905261.894:40): user pid=11488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199905261.896:41): user pid=11488 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199905261.896:42): login pid=11488 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199905261.911:43): user pid=11488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199905262.039:44): user pid=11488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199905262.040:45): user pid=11488 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199907062.150:46): user pid=13236 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199907062.150:47): user pid=13236 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199907062.150:48): user pid=13236 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199907070.614:49): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1199907074.603:50): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199907074.605:51): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199907074.606:52): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199907074.607:53): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199907074.607:54): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1199907074.607:55): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199907074.614:56): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199907074.614:57): user pid=13237 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199907074.786:58): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199907074.787:59): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199907074.787:60): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199907074.788:61): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199907074.789:62): avc:  denied  { unlink } for  pid=3011 comm="ssh-agent" name="agent.3010" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199907074.789:62): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffaecd4710 a2=7fffaecd45e0 a3=0 items=0 ppid=1 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1199907083.975:7815): auditd normal halt, sending auid=4294967295 pid=13743 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2144
>type=DAEMON_START msg=audit(1199977768.002:7128): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2139 res=success, auditd pid=2139
>type=CONFIG_CHANGE msg=audit(1199977768.102:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199977768.102:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199977768.138:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199977768.138:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199977772.629:8): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199977772.629:9): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199977774.485:10): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199977774.485:11): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199977791.910:12): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199977791.928:13): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199977791.980:14): avc:  denied  { create } for  pid=3004 comm="ssh-agent" name="agent.3004" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199977791.980:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff30db0900 a2=6e a3=0 items=0 ppid=2894 pid=3004 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199977791.981:15): avc:  denied  { write } for  pid=2894 comm="login" name="agent.3004" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199977791.981:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff04d92110 a2=6e a3=0 items=0 ppid=1 pid=2894 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199977791.982:16): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199977791.989:17): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199977792.003:18): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199977803.145:19): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199977803.148:20): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199977803.148:21): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199977803.150:22): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199977803.150:23): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199977803.150:24): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199977914.625:25): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199977914.627:26): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199977914.676:27): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199977914.676:28): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199978129.228:29): avc:  denied  { read write } for  pid=4252 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1199978129.228:29): avc:  denied  { write } for  pid=4252 comm="useradd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978129.228:29): arch=40000003 syscall=11 success=yes exit=0 a0=8103b58 a1=8103da8 a2=8102468 a3=0 items=0 ppid=4251 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978129.316:30): avc:  denied  { ioctl } for  pid=4252 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1199978129.316:30): arch=40000003 syscall=54 success=yes exit=0 a0=1 a1=5401 a2=ff90931c a3=ff90943c items=0 ppid=4251 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1199978129.316:31): user pid=4252 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1199978146.963:32): avc:  denied  { read write } for  pid=4283 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1199978146.963:32): avc:  denied  { write } for  pid=4283 comm="useradd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978146.963:32): arch=40000003 syscall=11 success=yes exit=0 a0=81039e8 a1=8102d48 a2=8102468 a3=0 items=0 ppid=4282 pid=4283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1199978146.965:33): user pid=4283 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1199978146.994:34): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1199978147.001:35): avc:  denied  { write } for  pid=4285 comm="nscd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:nscd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978147.001:35): arch=40000003 syscall=11 success=yes exit=0 a0=8056aa8 a1=ffafb7b4 a2=ffafb7c8 a3=ffafda9e items=0 ppid=4284 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="nscd" exe="/usr/sbin/nscd" subj=system_u:system_r:nscd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978464.043:36): avc:  denied  { write } for  pid=9168 comm="semodule" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978464.043:36): arch=40000003 syscall=11 success=yes exit=0 a0=8104050 a1=8102670 a2=8102468 a3=0 items=0 ppid=9167 pid=9168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978464.103:37): avc:  denied  { getattr } for  pid=9168 comm="semodule" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199978464.103:37): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8a871 a1=54 a2=ff9a393c a3=f7f8a871 items=0 ppid=9167 pid=9168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978473.646:38): avc:  denied  { read write } for  pid=9177 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1199978473.646:38): arch=40000003 syscall=11 success=yes exit=0 a0=f80009e8 a1=fb7036f0 a2=0 a3=0 items=0 ppid=9172 pid=9177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978474.906:39): avc:  denied  { write } for  pid=9177 comm="load_policy" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1199978474.906:39): arch=40000003 syscall=4 success=yes exit=25 a0=2 a1=ff8b255c a2=19 a3=19 items=0 ppid=9172 pid=9177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978476.750:40): avc:  denied  { read } for  pid=9184 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1199978476.750:40): arch=40000003 syscall=11 success=yes exit=0 a0=f80009e8 a1=fb7036f0 a2=0 a3=0 items=0 ppid=9172 pid=9184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978480.281:41): avc:  denied  { write } for  pid=9217 comm="restorecon" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978480.281:41): arch=40000003 syscall=11 success=yes exit=0 a0=8105f98 a1=8106b90 a2=81048c8 a3=0 items=0 ppid=9167 pid=9217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978510.524:42): avc:  denied  { search } for  pid=9498 comm="setsebool" name="home" dev=sdb2 ino=622593 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199978510.524:42): arch=40000003 syscall=5 success=no exit=-2 a0=ffd584d0 a1=0 a2=0 a3=ffd584d0 items=0 ppid=9497 pid=9498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978510.525:43): avc:  denied  { getattr } for  pid=9498 comm="setsebool" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199978510.525:43): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8b871 a1=54 a2=ffd57d9c a3=f7f8b871 items=0 ppid=9497 pid=9498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978510.658:44): avc:  denied  { getattr } for  pid=9499 comm="semanage" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199978510.658:44): arch=40000003 syscall=268 success=yes exit=0 a0=f79dd871 a1=54 a2=ffa0ab1c a3=f79dd871 items=0 ppid=9497 pid=9499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semanage" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978512.393:45): avc:  denied  { write } for  pid=9501 comm="semanage" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978512.393:45): arch=40000003 syscall=11 success=yes exit=0 a0=81044e0 a1=8102d48 a2=81027e0 a3=0 items=0 ppid=9497 pid=9501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semanage" exe="/usr/bin/python" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=CRED_ACQ msg=audit(1199978541.357:46): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199978541.358:47): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199978541.358:48): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1199978541.359:49): user pid=9639 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/sbin/reboot" (terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199978541.443:50): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199978541.444:51): user pid=2894 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199978541.444:52): avc:  denied  { unlink } for  pid=3005 comm="ssh-agent" name="agent.3004" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199978541.444:52): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff30db0110 a2=7fff30daffe0 a3=0 items=0 ppid=1 pid=3005 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1199978541.508:53): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199978541.510:54): user pid=3278 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1199978549.755:7129): auditd normal halt, sending auid=4294967295 pid=10140 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2139
>type=DAEMON_START msg=audit(1199978681.275:2598): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2149 res=success, auditd pid=2149
>type=CONFIG_CHANGE msg=audit(1199978681.374:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199978681.374:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199978681.410:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199978681.410:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199978685.420:8): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199978685.420:9): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199978687.343:10): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199978687.343:11): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199978706.088:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1199978706.088:13): avc:  denied  { write } for  pid=2896 comm="login" name="btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978706.088:13): arch=c000003e syscall=2 success=yes exit=4 a0=404a99 a1=1 a2=15bcb a3=4000 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978706.088:14): avc:  denied  { lock } for  pid=2896 comm="login" path="/var/log/btmp" dev=dm-2 ino=31873 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1199978706.088:14): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7ffffbf7e340 a3=8 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_LOGIN msg=audit(1199978706.095:15): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199978709.877:16): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199978710.010:17): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199978710.062:18): avc:  denied  { create } for  pid=3007 comm="ssh-agent" name="agent.3007" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199978710.062:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff4d004300 a2=6e a3=0 items=0 ppid=2896 pid=3007 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199978710.064:19): avc:  denied  { write } for  pid=2896 comm="login" name="agent.3007" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199978710.064:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7ffffbf7c300 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199978710.064:20): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199978710.081:21): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199978710.093:22): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199978718.948:23): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199978718.950:24): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199978718.999:25): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199978718.999:26): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199978748.501:27): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199978748.501:28): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199978748.576:29): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199978748.576:30): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199978805.008:31): user pid=3410 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=CRED_DISP msg=audit(1199978806.386:32): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199978806.386:33): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199978898.722:34): avc:  denied  { associate } for  pid=3436 comm="lynx" name="L3436-7173TMP.bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1199978898.722:34): arch=40000003 syscall=5 success=yes exit=4 a0=ffca5078 a1=c1 a2=180 a3=ffca5078 items=0 ppid=3262 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="lynx" exe="/usr/bin/lynx" subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1199979498.516:35): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199979498.518:36): user pid=3131 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199979504.190:37): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199979504.192:38): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199979504.205:39): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199979504.205:40): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199979793.235:41): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199979793.235:42): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199979793.290:43): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199979793.290:44): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199979881.059:45): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199979881.061:46): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199979881.062:47): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199979881.062:48): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199979967.390:49): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199979967.390:50): user pid=4425 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199980248.366:51): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199980248.368:52): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199980248.369:53): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199980248.369:54): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199980294.394:55): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199980294.394:56): user pid=4704 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199980333.085:57): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199980333.087:58): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199980333.088:59): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199980333.088:60): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199980351.705:61): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199980351.705:62): user pid=4815 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199980371.066:63): user pid=4953 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199980373.981:64): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199980373.983:65): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199980373.984:66): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199980373.984:67): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199980392.987:68): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199980392.988:69): user pid=4962 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199980519.753:70): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199980519.755:71): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199980519.756:72): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199980519.756:73): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199980519.757:74): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199980861.571:75): user pid=24706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199980861.573:76): user pid=24706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199980861.573:77): login pid=24706 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199980861.579:78): user pid=24706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199980861.820:79): user pid=24706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199980861.821:80): user pid=24706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199981435.787:81): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199981435.790:82): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199981435.791:83): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199981435.791:84): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199981487.476:85): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199981487.476:86): user pid=27114 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199981840.414:87): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199981840.417:88): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199981840.417:89): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199981840.418:90): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199981877.983:91): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199981877.984:92): user pid=31693 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199982456.494:93): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1199982456.497:94): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1199982456.498:95): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1199982456.498:96): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1199982456.498:97): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1199984273.460:98): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1199984273.460:99): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1199984280.285:100): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199984280.285:101): user pid=28764 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1199984280.309:102): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1199984280.309:103): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1199984461.835:104): user pid=28940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199984461.836:105): user pid=28940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199984461.836:106): login pid=28940 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199984461.850:107): user pid=28940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199984461.873:108): user pid=28940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199984461.927:109): user pid=28940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199984526.098:110): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1199984526.098:111): user pid=28787 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1199984596.572:112): avc:  denied  { getattr } for  pid=29123 comm="updatedb" path="/mnt/feddev/root" dev=sdb2 ino=573441 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984596.572:112): arch=c000003e syscall=6 success=yes exit=0 a0=6128d9 a1=7fff1bdc2e80 a2=7fff1bdc2e80 a3=0 items=0 ppid=29117 pid=29123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=AVC msg=audit(1199984596.572:113): avc:  denied  { search } for  pid=29123 comm="updatedb" name="root" dev=sdb2 ino=573441 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984596.572:113): arch=c000003e syscall=80 success=yes exit=0 a0=6128d9 a1=6128d9 a2=7fff1bdc2e80 a3=0 items=0 ppid=29117 pid=29123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=AVC msg=audit(1199984596.572:114): avc:  denied  { read } for  pid=29123 comm="updatedb" name="root" dev=sdb2 ino=573441 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984596.572:114): arch=c000003e syscall=2 success=yes exit=10 a0=406a69 a1=50000 a2=8c001 a3=0 items=0 ppid=29117 pid=29123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=AVC msg=audit(1199984732.578:115): avc:  denied  { getattr } for  pid=29292 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984732.578:115): arch=c000003e syscall=6 success=yes exit=0 a0=60443b a1=7fffa7bd7530 a2=7fffa7bd7530 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1199984732.578:116): avc:  denied  { search } for  pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984732.578:116): arch=c000003e syscall=80 success=yes exit=0 a0=60443b a1=7fffa7bd7230 a2=0 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1199984732.578:117): avc:  denied  { read } for  pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984732.578:117): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1199984732.578:118): avc:  denied  { getattr } for  pid=29292 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199984732.578:118): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffa7bd73a0 a2=7fffa7bd73a0 a3=3688d529f0 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1199984732.578:119): avc:  denied  { setattr } for  pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984732.578:119): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffa7bd7430 a2=3688d529d8 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1199984732.578:120): avc:  denied  { rmdir } for  pid=29292 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1199984732.578:120): arch=c000003e syscall=84 success=no exit=-39 a0=60443b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1199984732.638:121): avc:  denied  { getattr } for  pid=29292 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1199984732.638:121): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffa7bd73a0 a2=7fffa7bd73a0 a3=3688b22902 items=0 ppid=29290 pid=29292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=CRED_DISP msg=audit(1199986317.858:122): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199986317.859:123): user pid=4328 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199988062.004:124): user pid=32338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199988062.005:125): user pid=32338 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199988062.005:126): login pid=32338 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199988062.030:127): user pid=32338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199988062.095:128): user pid=32338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199988062.096:129): user pid=32338 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1199989892.169:130): user pid=1550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199989898.699:131): user pid=1560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1199989903.431:132): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199989903.431:133): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199989903.462:134): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199989903.462:135): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199990636.257:136): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199990636.257:137): user pid=1563 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199990782.466:138): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199990782.467:139): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199990782.472:140): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199990782.472:141): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199991661.108:142): user pid=20580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1199991661.109:143): user pid=20580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1199991661.110:144): login pid=20580 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1199991661.122:145): user pid=20580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199991661.145:146): user pid=20580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1199991661.146:147): user pid=20580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1199992990.819:148): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199992990.839:149): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199992995.217:150): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199992995.221:151): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199992995.237:152): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199992995.237:153): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1199992995.237:154): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199993001.983:155): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199993001.986:156): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1199993001.987:157): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1199993001.988:158): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1199993001.988:159): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1199993001.988:160): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1199993002.120:161): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1199993002.120:162): user pid=26083 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199993002.248:163): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199993002.249:164): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199993002.249:165): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1199993002.250:166): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1199993002.256:167): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1199993002.257:168): avc:  denied  { unlink } for  pid=3008 comm="ssh-agent" name="agent.3007" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199993002.257:168): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff4d003b10 a2=7fff4d0039e0 a3=0 items=0 ppid=1 pid=3008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1199993002.257:169): user pid=25945 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1199993002.345:170): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199993002.345:171): user pid=7153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199993002.744:172): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199993002.745:173): user pid=3929 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1199993012.624:2599): auditd normal halt, sending auid=4294967295 pid=26588 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2149
>type=DAEMON_START msg=audit(1199998851.430:2899): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2146 res=success, auditd pid=2146
>type=CONFIG_CHANGE msg=audit(1199998851.530:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199998851.530:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1199998851.558:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1199998851.558:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1199998856.058:8): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1199998856.058:9): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1199998857.839:10): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1199998857.839:11): user pid=2349 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1199998874.435:12): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199998874.453:13): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1199998874.505:14): avc:  denied  { create } for  pid=3012 comm="ssh-agent" name="agent.3012" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199998874.505:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff05dc2f0 a2=6e a3=0 items=0 ppid=2902 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1199998874.506:15): avc:  denied  { write } for  pid=2902 comm="login" name="agent.3012" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1199998874.506:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff2d6daa60 a2=6e a3=0 items=0 ppid=1 pid=2902 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1199998874.506:16): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199998874.514:17): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1199998874.527:18): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199998890.365:19): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199998890.367:20): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199998890.415:21): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199998890.415:22): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1199998936.365:23): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1199998936.366:24): user pid=3139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199998940.453:25): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199998940.456:26): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199998940.467:27): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199998940.467:28): user pid=3565 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199998957.428:29): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199998957.428:30): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199998957.492:31): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199998957.493:32): user pid=3733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199999023.375:33): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1199999023.376:34): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1199999023.376:35): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1199999028.451:36): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1199999028.453:37): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1199999028.454:38): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1199999028.454:39): user pid=3822 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1199999032.280:40): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1199999032.280:41): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1199999032.281:42): user pid=3860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_START msg=audit(1200003225.153:1042): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2178 res=success, auditd pid=2178
>type=CONFIG_CHANGE msg=audit(1200003225.252:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200003225.252:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200003225.288:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200003225.288:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200003229.481:8): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1200003229.481:9): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1200003231.317:10): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1200003231.317:11): user pid=2376 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1200003259.484:12): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1200003259.502:13): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1200003259.572:14): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1200003259.636:15): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1200003288.583:16): avc:  denied  { execheap } for  pid=3452 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1200003288.583:16): arch=c000003e syscall=10 success=yes exit=0 a0=f04000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3452 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200003989.680:17): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1200003989.680:18): user pid=3099 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1200003999.354:1043): auditd normal halt, sending auid=4294967295 pid=5100 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2178
>type=DAEMON_START msg=audit(1200323353.500:78): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2143 res=success, auditd pid=2143
>type=CONFIG_CHANGE msg=audit(1200323353.599:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200323353.599:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200323353.627:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200323353.627:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200323358.823:8): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200323358.823:9): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200323360.480:10): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200323360.481:11): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200323377.963:12): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200323377.981:13): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200323378.033:14): avc:  denied  { create } for  pid=3011 comm="ssh-agent" name="agent.3011" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200323378.033:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff429b1c60 a2=6e a3=0 items=0 ppid=2899 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200323378.035:15): avc:  denied  { write } for  pid=2899 comm="login" name="agent.3011" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200323378.035:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff7d04d3d0 a2=6e a3=0 items=0 ppid=1 pid=2899 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200323378.035:16): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200323378.043:17): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200323378.056:18): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200323390.059:19): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200323390.062:20): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200323390.063:21): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200323390.064:22): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200323390.064:23): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200323390.065:24): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=AVC msg=audit(1200323719.243:25): avc:  denied  { read write } for  pid=3425 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323719.243:25): arch=c000003e syscall=59 success=yes exit=0 a0=6c84b0 a1=6c6280 a2=6c5fd0 a3=0 items=0 ppid=3424 pid=3425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200323788.225:26): avc:  denied  { read write } for  pid=3501 comm="userdel" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323788.225:26): arch=c000003e syscall=59 success=yes exit=0 a0=6c7c80 a1=6c7be0 a2=6c5fd0 a3=0 items=0 ppid=3500 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200323788.262:27): avc:  denied  { ioctl } for  pid=3501 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323788.262:27): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff4559a7d0 a3=3688d529f0 items=0 ppid=3500 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200323788.263:28): avc:  denied  { getattr } for  pid=3501 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323788.263:28): arch=c000003e syscall=6 success=yes exit=0 a0=7fff4559ee70 a1=7fff4559a9e0 a2=7fff4559a9e0 a3=3688d529f0 items=0 ppid=3500 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200323788.263:29): user pid=3501 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200323788.277:30): user pid=3501 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1200323789.827:31): user pid=3504 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1200323789.952:32): avc:  denied  { ioctl } for  pid=3507 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323789.952:32): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff38560a80 a3=2aaaaf54d3f2 items=0 ppid=3500 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200323789.952:33): avc:  denied  { getattr } for  pid=3507 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323789.952:33): arch=c000003e syscall=6 success=yes exit=0 a0=7fff38565120 a1=7fff38560c90 a2=7fff38560c90 a3=2aaaaf54d3f2 items=0 ppid=3500 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200323789.952:34): user pid=3507 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200323789.957:35): user pid=3508 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200323789.966:36): avc:  denied  { read write } for  pid=3512 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323789.966:36): arch=c000003e syscall=59 success=yes exit=0 a0=6c8e20 a1=6c7ff0 a2=6c5fd0 a3=0 items=0 ppid=3500 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200323790.013:37): user pid=3512 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200323874.670:38): avc:  denied  { read write } for  pid=3598 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323874.670:38): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccf90 a1=2aaab288ca10 a2=0 a3=0 items=0 ppid=3580 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200323875.206:39): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200323874.824:40): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200323874.824:40): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3580 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200323909.180:41): avc:  denied  { read write } for  pid=3715 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323909.180:41): arch=c000003e syscall=59 success=yes exit=0 a0=6c84b0 a1=6c6280 a2=6c5fd0 a3=0 items=0 ppid=3714 pid=3715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200323910.215:42): user pid=3719 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=postgres exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1200323910.215:43): avc:  denied  { read write } for  pid=3720 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323910.215:43): arch=c000003e syscall=59 success=yes exit=0 a0=6c8d20 a1=6c7c10 a2=6c5fd0 a3=0 items=0 ppid=3718 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200323910.218:44): user pid=3720 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=postgres exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1200323944.573:45): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200323944.576:46): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200323944.577:47): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200323944.577:48): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200323944.577:49): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200323971.670:50): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200323971.673:51): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200323971.674:52): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200323971.675:53): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200323971.675:54): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200323971.675:55): user pid=3908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/mount" (terminal=tty2 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1200323985.591:56): user pid=3969 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1200323994.717:57): avc:  denied  { read write } for  pid=3977 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200323994.717:57): arch=c000003e syscall=59 success=yes exit=0 a0=10dae70 a1=1783ee0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3970 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200323995.224:58): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200323994.848:59): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200323994.848:59): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3970 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200323995.657:60): user pid=3970 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200324004.055:61): avc:  denied  { read write } for  pid=3987 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200324004.055:61): arch=c000003e syscall=59 success=yes exit=0 a0=cfa760 a1=8d8e2f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3979 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200324004.580:62): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200324004.198:63): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200324004.198:63): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3979 pid=3987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200324005.012:64): user pid=3979 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1200324006.260:65): user pid=3991 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200324007.230:66): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1200324007.233:67): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1200324007.234:68): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1200324007.234:69): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1200324007.235:70): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1200324015.554:71): avc:  denied  { read write } for  pid=4124 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200324015.554:71): arch=c000003e syscall=59 success=yes exit=0 a0=10dae70 a1=1783ee0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3992 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200324015.975:72): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200324015.681:73): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200324015.681:73): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=3992 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200324016.405:74): user pid=3992 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200324023.554:75): avc:  denied  { read write } for  pid=4135 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200324023.554:75): arch=c000003e syscall=59 success=yes exit=0 a0=cfa760 a1=8d8e2f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=4127 pid=4135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200324023.980:76): user pid=2363 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200324023.682:77): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200324023.682:77): arch=c000003e syscall=1 success=yes exit=4051775 a0=4 a1=2aaaab87a000 a2=3dd33f a3=0 items=0 ppid=4127 pid=4135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200324024.372:78): user pid=4127 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200324752.615:79): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1200324752.617:80): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1200324752.645:81): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1200324752.645:82): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1200324814.633:83): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1200324814.633:84): user pid=5488 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1200324819.757:85): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1200324819.760:86): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1200324819.780:87): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1200324819.780:88): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=AVC msg=audit(1200325530.173:89): avc:  denied  { write } for  pid=10095 comm="useradd" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1200325530.173:89): arch=40000003 syscall=11 success=yes exit=0 a0=8103c48 a1=8103888 a2=8102578 a3=0 items=0 ppid=10094 pid=10095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200325530.254:90): user pid=10095 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=nscd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1200325565.966:91): avc:  denied  { write } for  pid=10156 comm="semodule" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1200325565.966:91): arch=40000003 syscall=11 success=yes exit=0 a0=81041a0 a1=8102788 a2=8102578 a3=0 items=0 ppid=10155 pid=10156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200325566.116:92): avc:  denied  { getattr } for  pid=10156 comm="semodule" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1200325566.116:92): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8a871 a1=54 a2=ffbf1bfc a3=f7f8a871 items=0 ppid=10155 pid=10156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200325581.081:93): avc:  denied  { write } for  pid=10200 comm="restorecon" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1200325581.081:93): arch=40000003 syscall=11 success=yes exit=0 a0=81060e8 a1=8106ce0 a2=8104a18 a3=0 items=0 ppid=10155 pid=10200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1200325911.228:94): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200325911.255:95): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200325911.318:96): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200325911.337:97): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200325942.093:98): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200325942.094:99): user pid=10722 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200326461.720:100): user pid=11505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200326461.721:101): user pid=11505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200326461.721:102): login pid=11505 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200326461.761:103): user pid=11505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200326461.973:104): user pid=11505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200326461.974:105): user pid=11505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200326633.982:106): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1200326633.984:107): user pid=5896 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1200328946.556:108): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1200328946.556:109): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200328953.523:110): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200328953.524:111): user pid=14094 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200328953.639:112): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1200328953.639:113): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200329229.359:114): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200329229.360:115): user pid=14119 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200329543.084:116): avc:  denied  { getattr } for  pid=19674 comm="updatedb" path="/mnt/winxp/SFU/lib" dev=sda1 ino=66716 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:fusefs_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1200329543.084:116): arch=c000003e syscall=6 success=yes exit=0 a0=611cb9 a1=7fffe5bf4bb0 a2=7fffe5bf4bb0 a3=3688d529f0 items=0 ppid=19668 pid=19674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=AVC msg=audit(1200329545.157:117): avc:  denied  { getattr } for  pid=19674 comm="updatedb" path="/mnt/winxp/SFU/dev/comport1" dev=sda1 ino=74155 scontext=system_u:system_r:locate_t:s0 tcontext=system_u:object_r:fusefs_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200329545.157:117): arch=c000003e syscall=6 success=yes exit=0 a0=611d69 a1=7fffe5bf49b0 a2=7fffe5bf49b0 a3=3688d529f0 items=0 ppid=19668 pid=19674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="updatedb" exe="/usr/bin/updatedb" subj=system_u:system_r:locate_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200329572.034:118): user pid=19946 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200329572.035:119): user pid=19946 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200329572.035:120): user pid=19946 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200329581.998:121): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200329585.387:122): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200329585.390:123): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200329585.390:124): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200329585.391:125): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200329585.392:126): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200329585.392:127): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200329585.399:128): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200329585.399:129): user pid=19953 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200329588.561:130): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1200329588.561:131): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200329588.632:132): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200329588.649:133): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200329588.649:134): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1200329588.649:135): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200329588.650:136): avc:  denied  { unlink } for  pid=3012 comm="ssh-agent" name="agent.3011" dev=dm-0 ino=299191 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200329588.650:136): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff429b1470 a2=7fff429b1340 a3=0 items=0 ppid=1 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1200329605.073:79): auditd normal halt, sending auid=4294967295 pid=20472 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2143
>type=DAEMON_START msg=audit(1200414977.173:6022): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2141 res=success, auditd pid=2141
>type=CONFIG_CHANGE msg=audit(1200414977.273:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200414977.273:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200414977.308:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200414977.308:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200414981.999:8): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200414981.999:9): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200414983.639:10): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200414983.639:11): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200414999.696:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200414999.714:13): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200414999.774:14): avc:  denied  { create } for  pid=3004 comm="ssh-agent" name="agent.3004" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200414999.774:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff65ea3020 a2=6e a3=0 items=0 ppid=2896 pid=3004 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200414999.776:15): avc:  denied  { write } for  pid=2896 comm="login" name="agent.3004" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200414999.776:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff123196a0 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200414999.776:16): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200414999.784:17): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200414999.797:18): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200415010.825:19): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200415010.827:20): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200415010.828:21): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200415010.829:22): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200415010.829:23): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200415010.830:24): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200415019.961:25): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1200415020.097:26): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1200415023.981:27): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200415023.984:28): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200415023.985:29): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200415023.986:30): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200415023.986:31): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200415051.243:32): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200415051.246:33): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200415051.302:34): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200415051.302:35): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200415086.669:36): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200415086.670:37): user pid=3308 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200415144.013:38): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200415144.013:39): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200415144.013:40): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200415144.014:41): user pid=3781 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/mount" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200415906.276:42): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200415906.279:43): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200415906.280:44): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200415906.280:45): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200415906.280:46): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200416461.239:47): user pid=26330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200416461.240:48): user pid=26330 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200416461.240:49): login pid=26330 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200416461.256:50): user pid=26330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200416461.392:51): user pid=26330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200416461.394:52): user pid=26330 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200416950.034:53): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1200416950.037:54): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1200416950.053:55): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1200416950.053:56): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1200417227.325:57): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200417227.328:58): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200417227.329:59): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200417227.329:60): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200417537.358:61): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200417537.359:62): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200417541.373:63): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200417541.376:64): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200417541.378:65): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200417541.378:66): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200417541.378:67): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200417988.617:68): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1200417988.619:69): user pid=27130 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1200418385.689:70): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200418385.690:71): user pid=28439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200418391.368:72): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200418391.371:73): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200418391.372:74): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200418391.372:75): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200418391.373:76): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200418665.586:77): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200418665.588:78): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200418665.590:79): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200418665.590:80): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200418687.910:81): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200418687.910:82): user pid=30698 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200419224.308:83): user pid=31650 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200419224.308:84): user pid=31650 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200419224.308:85): user pid=31650 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200419233.495:86): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200419236.613:87): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200419236.615:88): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200419236.616:89): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200419236.617:90): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200419236.617:91): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200419236.617:92): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200419236.622:93): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200419236.622:94): user pid=31658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200419236.676:95): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200419236.677:96): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200419236.677:97): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200419236.677:98): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200419236.678:99): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1200419236.678:100): avc:  denied  { unlink } for  pid=3005 comm="ssh-agent" name="agent.3004" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200419236.678:100): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff65ea2830 a2=7fff65ea2700 a3=0 items=0 ppid=1 pid=3005 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200419236.679:101): user pid=29446 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200419236.680:102): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200419236.680:103): user pid=27771 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1200419245.848:6023): auditd normal halt, sending auid=4294967295 pid=32165 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2141
>type=DAEMON_START msg=audit(1200419431.074:3402): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2142 res=success, auditd pid=2142
>type=CONFIG_CHANGE msg=audit(1200419431.173:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200419431.173:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200419431.201:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200419431.201:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200419435.908:8): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200419435.908:9): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200419437.292:10): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200419437.292:11): user pid=2345 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200419467.589:12): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1200419467.604:13): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200419473.123:14): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1200419473.123:15): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200419477.249:16): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200419477.358:17): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200419477.409:18): avc:  denied  { create } for  pid=3011 comm="ssh-agent" name="agent.3011" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200419477.409:18): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff3ffa65c0 a2=6e a3=0 items=0 ppid=2897 pid=3011 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200419477.410:19): avc:  denied  { write } for  pid=2897 comm="login" name="agent.3011" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200419477.410:19): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff51fb1330 a2=6e a3=0 items=0 ppid=1 pid=2897 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200419477.412:20): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200419477.418:21): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200419477.431:22): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200419483.102:23): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200419483.104:24): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200419483.152:25): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200419483.152:26): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200419588.688:27): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200419588.691:28): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200419588.693:29): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200419588.693:30): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200419588.693:31): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200419614.154:32): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200419614.157:33): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200419614.158:34): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200419614.159:35): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200419614.159:36): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200419614.159:37): user pid=3589 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/less" (terminal=tty2 res=success)'
>type=AVC msg=audit(1200419944.998:38): avc:  denied  { write } for  pid=3873 comm="semodule" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1200419944.998:38): arch=40000003 syscall=11 success=yes exit=0 a0=8104050 a1=8102660 a2=8102458 a3=0 items=0 ppid=3872 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200419945.076:39): avc:  denied  { getattr } for  pid=3873 comm="semodule" name="/" dev=sdb2 ino=2 scontext=system_u:system_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1200419945.076:39): arch=40000003 syscall=268 success=yes exit=0 a0=f7f8a871 a1=54 a2=fff33f6c a3=f7f8a871 items=0 ppid=3872 pid=3873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="semodule" exe="/usr/sbin/semodule" subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200419954.579:40): avc:  denied  { read write } for  pid=3882 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200419954.579:40): arch=40000003 syscall=11 success=yes exit=0 a0=f80009e8 a1=fb71a860 a2=0 a3=0 items=0 ppid=3875 pid=3882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200419960.366:41): avc:  denied  { write } for  pid=3922 comm="restorecon" path="/dev/null" dev=sdb2 ino=65538 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file
>type=SYSCALL msg=audit(1200419960.366:41): arch=40000003 syscall=11 success=yes exit=0 a0=8105f98 a1=8106b90 a2=81048c8 a3=0 items=0 ppid=3872 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1200420039.241:42): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200420039.244:43): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200420039.245:44): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200420039.245:45): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200420039.246:46): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200420062.204:47): user pid=4373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200420062.205:48): user pid=4373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200420062.205:49): login pid=4373 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200420062.214:50): user pid=4373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200420065.127:51): user pid=4373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200420065.128:52): user pid=4373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200421337.279:53): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200421337.280:54): user pid=3134 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200422092.970:55): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200422092.972:56): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200422092.979:57): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200422092.979:58): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200423661.141:59): user pid=9024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200423661.143:60): user pid=9024 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200423661.143:61): login pid=9024 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200423661.149:62): user pid=9024 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200423661.176:63): user pid=9024 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200423661.177:64): user pid=9024 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200424146.968:65): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200424152.648:66): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200424155.056:67): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200424155.058:68): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200424155.059:69): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200424155.060:70): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200424155.060:71): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200424155.061:72): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200424155.180:73): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200424155.180:74): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200424155.243:75): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200424155.244:76): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200424155.245:77): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200424155.246:78): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200424155.246:79): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200424155.247:80): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200424155.248:81): user pid=7263 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1200424155.249:82): avc:  denied  { unlink } for  pid=3012 comm="ssh-agent" name="agent.3011" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200424155.249:82): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff3ffa5dd0 a2=7fff3ffa5ca0 a3=0 items=0 ppid=1 pid=3012 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200424155.250:83): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1200424164.439:3403): auditd normal halt, sending auid=4294967295 pid=10006 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2142
>type=DAEMON_START msg=audit(1200498685.579:734): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2141 res=success, auditd pid=2141
>type=CONFIG_CHANGE msg=audit(1200498685.679:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200498685.679:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200498685.715:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200498685.715:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200498690.165:8): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200498690.165:9): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200498692.112:10): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200498692.112:11): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200498711.081:12): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1200498711.097:13): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200498715.226:14): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200498715.243:15): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200498715.296:16): avc:  denied  { create } for  pid=3008 comm="ssh-agent" name="agent.3008" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200498715.296:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fffdc69ed50 a2=6e a3=0 items=0 ppid=2896 pid=3008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200498715.298:17): avc:  denied  { write } for  pid=2896 comm="login" name="agent.3008" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200498715.298:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffa248c810 a2=6e a3=0 items=0 ppid=1 pid=2896 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200498715.300:18): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200498715.305:19): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200498715.318:20): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200498724.173:21): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200498724.176:22): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200498724.177:23): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200498724.178:24): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200498724.178:25): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200498724.179:26): user pid=3131 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200498926.817:27): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200498926.820:28): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200498926.821:29): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200498926.822:30): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200498926.822:31): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=ANOM_ABEND msg=audit(1200498967.270:32): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=3802 comm="X" sig=6
>type=USER_CHAUTHTOK msg=audit(1200499018.761:33): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499018.761:34): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499018.762:35): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499018.762:36): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499018.762:37): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499018.774:38): user pid=4842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499018.789:39): user pid=4848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499018.804:40): user pid=4850 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499018.824:41): user pid=4855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499018.825:42): user pid=4855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200499203.199:43): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200499203.201:44): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200499203.223:45): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200499203.223:46): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200499253.420:47): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200499253.421:48): user pid=5139 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200499261.387:49): user pid=5607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200499261.388:50): user pid=5607 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200499261.388:51): login pid=5607 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200499261.403:52): user pid=5607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200499261.532:53): user pid=5607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200499261.533:54): user pid=5607 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200499301.325:55): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200499301.327:56): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200499301.334:57): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200499301.334:58): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200499324.469:59): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200499324.470:60): user pid=5780 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.100:61): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.100:62): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499403.100:63): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.101:64): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.101:65): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.107:66): user pid=6444 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499403.122:67): user pid=6450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499403.135:68): user pid=6452 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.151:69): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499403.151:70): user pid=6457 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.713:71): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.713:72): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499534.713:73): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.713:74): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.713:75): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.735:76): user pid=6829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499534.750:77): user pid=6835 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200499534.763:78): user pid=6837 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.780:79): user pid=6842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499534.780:80): user pid=6842 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200499541.641:81): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200499541.644:82): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200499541.646:83): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200499541.646:84): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200499541.646:85): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499628.313:86): user pid=7208 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499628.319:87): user pid=7212 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499639.509:88): user pid=7656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200499644.585:89): user pid=7703 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1200499875.362:90): auid=4294967295 uid=500 gid=101 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 pid=29029 comm="lt-gst" sig=11
>type=USER_AUTH msg=audit(1200500258.080:91): user pid=29919 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200500258.080:92): user pid=29919 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200500258.081:93): user pid=29919 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200500267.416:94): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200500267.418:95): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200500267.418:96): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200500267.419:97): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200500267.419:98): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200500267.420:99): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200500267.425:100): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200500267.425:101): user pid=29926 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200500267.583:102): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200500267.583:103): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200500267.584:104): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200500267.584:105): user pid=2901 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200500267.585:106): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200500267.586:107): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200500267.587:108): avc:  denied  { unlink } for  pid=3009 comm="ssh-agent" name="agent.3008" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200500267.587:108): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffdc69e560 a2=7fffdc69e430 a3=0 items=0 ppid=1 pid=3009 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1200500277.217:735): auditd normal halt, sending auid=4294967295 pid=30424 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2141
>type=DAEMON_START msg=audit(1200586572.027:8324): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2143 res=success, auditd pid=2143
>type=CONFIG_CHANGE msg=audit(1200586572.127:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200586572.127:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200586572.155:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200586572.155:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200586577.044:8): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200586577.044:9): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200586579.307:10): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200586579.307:11): user pid=2346 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200586605.132:12): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200586605.150:13): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200586605.202:14): avc:  denied  { create } for  pid=3007 comm="ssh-agent" name="agent.3007" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200586605.202:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff70e5cf0 a2=6e a3=0 items=0 ppid=2898 pid=3007 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200586605.204:15): avc:  denied  { write } for  pid=2898 comm="login" name="agent.3007" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200586605.204:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7ffff41524d0 a2=6e a3=0 items=0 ppid=1 pid=2898 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200586605.204:16): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200586605.212:17): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200586605.224:18): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200586623.674:19): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200586623.677:20): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200586623.724:21): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200586623.725:22): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200586633.546:23): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200586633.546:24): user pid=3135 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.757:25): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.758:26): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200586725.758:27): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.758:28): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.758:29): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.762:30): user pid=3799 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200586725.776:31): user pid=3805 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200586725.789:32): user pid=3807 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.804:33): user pid=3812 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586725.805:34): user pid=3812 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200586764.544:35): user pid=3932 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200586999.029:36): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1200586999.052:37): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1200587003.402:38): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200587003.404:39): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200587003.406:40): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200587003.406:41): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200587003.406:42): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200587012.610:43): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200587012.613:44): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200587012.614:45): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200587012.615:46): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200587012.615:47): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200587012.616:48): user pid=11012 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200587162.887:49): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)'
>type=USER_LOGIN msg=audit(1200587162.887:50): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)'
>type=USER_AUTH msg=audit(1200587176.840:51): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)'
>type=USER_LOGIN msg=audit(1200587176.840:52): user pid=2902 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=failed)'
>type=USER_AUTH msg=audit(1200587195.300:53): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1200587195.303:54): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1200587195.304:55): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1200587195.304:56): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1200587195.305:57): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1200587201.192:58): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200587201.192:59): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200587201.260:60): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200587201.260:61): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200587201.294:62): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200587201.295:63): user pid=11330 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200587349.807:64): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200587349.809:65): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200587349.810:66): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200587349.811:67): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200587349.811:68): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200587349.811:69): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/steghide/devel" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200587350.349:70): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200587350.349:71): user pid=11693 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200587350.436:72): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200587350.437:73): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200587350.438:74): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200587350.438:75): user pid=2899 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200587350.439:76): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1200587350.443:77): user pid=2900 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1200587350.443:78): avc:  denied  { unlink } for  pid=3008 comm="ssh-agent" name="agent.3007" dev=dm-0 ino=296421 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200587350.443:78): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff70e5500 a2=7ffff70e53d0 a3=0 items=0 ppid=1 pid=3008 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1200587358.837:8325): auditd normal halt, sending auid=4294967295 pid=12202 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=2143
>type=DAEMON_START msg=audit(1200588497.276:6327): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1906 res=success, auditd pid=1906
>type=CONFIG_CHANGE msg=audit(1200588497.375:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200588497.375:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200588497.411:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200588497.411:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200588502.052:8): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200588502.052:9): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200588504.115:10): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200588504.116:11): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200588522.989:12): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1200588523.009:13): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200588527.666:14): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200588527.678:15): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200588527.730:16): avc:  denied  { create } for  pid=2763 comm="ssh-agent" name="agent.2763" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200588527.730:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff63a39630 a2=6e a3=0 items=0 ppid=2650 pid=2763 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200588527.731:17): avc:  denied  { write } for  pid=2650 comm="login" name="agent.2763" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200588527.731:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff50db0130 a2=6e a3=0 items=0 ppid=1 pid=2650 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200588527.733:18): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200588527.740:19): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200588527.753:20): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200588664.440:21): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200588664.442:22): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200588664.490:23): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200588664.490:24): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200588721.617:25): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200588721.618:26): user pid=3029 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200588783.715:27): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200588783.717:28): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200588783.723:29): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200588783.723:30): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200588844.634:31): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200588844.634:32): user pid=3514 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200589171.725:33): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589171.727:34): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200589171.733:35): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200589171.733:36): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200589187.212:37): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200589187.213:38): user pid=4270 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589261.237:39): user pid=4725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200589261.238:40): user pid=4725 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200589261.238:41): login pid=4725 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200589261.253:42): user pid=4725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200589261.390:43): user pid=4725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200589261.391:44): user pid=4725 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200589535.370:45): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589535.372:46): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200589535.379:47): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200589535.379:48): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200589578.824:49): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200589578.825:50): user pid=4914 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200589597.172:51): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589597.174:52): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200589597.180:53): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200589597.181:54): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200589790.107:55): user pid=5861 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589790.107:56): user pid=5861 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200589790.150:57): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200589790.151:58): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200589790.151:59): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200589790.152:60): user pid=5316 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200589790.154:61): avc:  denied  { unlink } for  pid=2764 comm="ssh-agent" name="agent.2763" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200589790.154:61): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff63a38e40 a2=7fff63a38d10 a3=0 items=0 ppid=1 pid=2764 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1200589798.376:6328): auditd normal halt, sending auid=4294967295 pid=6362 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1906
>type=DAEMON_START msg=audit(1200589868.142:3922): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1882 res=success, auditd pid=1882
>type=CONFIG_CHANGE msg=audit(1200589868.241:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200589868.241:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200589868.277:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200589868.277:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200589872.884:8): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200589872.884:9): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200589874.906:10): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200589874.907:11): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200589892.611:12): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1200589892.623:13): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200589896.167:14): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589896.180:15): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200589896.232:16): avc:  denied  { create } for  pid=2747 comm="ssh-agent" name="agent.2747" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200589896.232:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff944276c0 a2=6e a3=0 items=0 ppid=2637 pid=2747 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200589896.234:17): avc:  denied  { write } for  pid=2637 comm="login" name="agent.2747" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200589896.234:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff5a6289b0 a2=6e a3=0 items=0 ppid=1 pid=2637 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200589896.235:18): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200589896.242:19): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200589896.255:20): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200589913.303:21): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589913.305:22): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200589913.354:23): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200589913.354:24): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200589929.582:25): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200589929.582:26): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200589929.655:27): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200589929.655:28): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200589947.028:29): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200589947.030:30): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200589947.031:31): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200589947.031:32): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200589947.032:33): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200589953.722:34): avc:  denied  { search } for  pid=3345 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200589953.722:34): arch=c000003e syscall=21 success=yes exit=0 a0=7fffa599ffa8 a1=4 a2=0 a3=7fffa599f413 items=0 ppid=3344 pid=3345 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200589962.394:35): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200589962.394:36): user pid=3031 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1200589998.328:37): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=3275 comm="X" sig=6
>type=AVC msg=audit(1200590028.715:38): avc:  denied  { search } for  pid=3717 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200590028.715:38): arch=c000003e syscall=21 success=yes exit=0 a0=7fffb34fffa8 a1=4 a2=0 a3=7fffb34fef73 items=0 ppid=3716 pid=3717 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200590153.950:39): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200590153.950:40): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200590153.958:41): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200590153.959:42): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200590451.697:43): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200590451.697:44): user pid=4422 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200590474.815:45): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200590474.816:46): user pid=2874 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200592693.172:47): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200592693.174:48): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200592693.181:49): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200592693.181:50): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200592705.819:51): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200592705.820:52): user pid=14871 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200592709.571:53): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200592709.572:54): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200592709.585:55): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200592709.585:56): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200592723.439:57): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200592723.439:58): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200592723.510:59): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200592723.510:60): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200592788.433:61): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200592788.433:62): user pid=15418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200592798.474:63): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200592798.475:64): user pid=15253 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200592806.886:65): user pid=15541 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200592810.975:66): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200592810.978:67): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200592810.988:68): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200592810.989:69): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200592824.207:70): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200592824.207:71): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200592824.308:72): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200592824.308:73): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200592861.848:74): user pid=15934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200592861.849:75): user pid=15934 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200592861.849:76): login pid=15934 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200592861.858:77): user pid=15934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200592862.011:78): user pid=15934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200592862.012:79): user pid=15934 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200595455.492:80): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200595455.493:81): user pid=15721 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200595459.562:82): avc:  denied  { getattr } for  pid=24588 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200595459.562:82): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc3836980 a1=7fffc38228f0 a2=7fffc38228f0 a3=7fffc383698d items=0 ppid=24587 pid=24588 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1200595459.562:83): avc:  denied  { search } for  pid=24588 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200595459.562:83): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc3836980 a1=7fffc38228f0 a2=7fffc38228f0 a3=7fffc383698d items=0 ppid=24587 pid=24588 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1200595459.662:84): avc:  denied  { search } for  pid=24591 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200595459.662:84): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fffccfeb410 a2=7fffccfeb410 a3=61931b items=0 ppid=24588 pid=24591 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200595459.750:85): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200595459.751:86): user pid=15553 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200595459.862:87): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1200595459.862:88): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200595466.768:89): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200595466.769:90): user pid=24603 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200595466.796:91): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1200595466.796:92): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.697:93): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.697:94): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200595601.697:95): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.697:96): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.697:97): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.781:98): user pid=25000 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200595601.796:99): user pid=25006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200595601.812:100): user pid=25008 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.839:101): user pid=25013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595601.840:102): user pid=25013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200595633.595:103): user pid=25091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200595778.772:104): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200595778.772:105): user pid=24621 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200595788.404:106): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200595788.406:107): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200595788.420:108): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200595788.420:109): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200595819.454:110): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200595819.454:111): user pid=731 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596085.466:112): user pid=3092 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200596088.221:113): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596088.222:114): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200596088.222:115): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596088.222:116): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596088.222:117): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596088.230:118): user pid=3151 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200596088.258:119): user pid=3159 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200596088.287:120): user pid=3163 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596088.371:121): user pid=3172 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596088.371:122): user pid=3172 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200596108.679:123): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200596231.683:124): user pid=11279 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200596237.405:125): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200596237.407:126): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200596237.448:127): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200596237.449:128): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200596299.854:129): avc:  denied  { getattr } for  pid=11936 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200596299.854:129): arch=c000003e syscall=6 success=yes exit=0 a0=604443 a1=7fff089462a0 a2=7fff089462a0 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200596299.854:130): avc:  denied  { search } for  pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200596299.854:130): arch=c000003e syscall=80 success=yes exit=0 a0=604443 a1=7fff08945fa0 a2=0 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200596299.854:131): avc:  denied  { read } for  pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200596299.854:131): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200596299.861:132): avc:  denied  { getattr } for  pid=11936 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200596299.861:132): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff08946110 a2=7fff08946110 a3=3688d529f0 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200596299.861:133): avc:  denied  { setattr } for  pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200596299.861:133): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff089461a0 a2=3688d529d8 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200596299.861:134): avc:  denied  { rmdir } for  pid=11936 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200596299.861:134): arch=c000003e syscall=84 success=no exit=-39 a0=604443 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200596299.960:135): avc:  denied  { getattr } for  pid=11936 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1200596299.960:135): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff08946110 a2=7fff08946110 a3=3688b22902 items=0 ppid=11934 pid=11936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=CRED_DISP msg=audit(1200596327.698:136): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200596327.700:137): user pid=11375 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200596331.597:138): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200596331.599:139): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200596331.612:140): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200596331.612:141): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200596366.560:142): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200596366.561:143): user pid=12020 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200596461.065:144): user pid=12446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200596461.066:145): user pid=12446 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200596461.066:146): login pid=12446 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200596461.082:147): user pid=12446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200596461.160:148): user pid=12446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200596461.161:149): user pid=12446 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200596958.705:150): user pid=13120 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200596958.705:151): user pid=13120 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200596958.705:152): user pid=13120 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200596969.889:153): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200596975.778:154): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200596975.781:155): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200596975.807:156): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200596975.808:157): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200596975.808:158): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200596975.808:159): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200596975.815:160): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200596975.815:161): user pid=13127 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200596975.869:162): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200596975.870:163): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200596975.870:164): user pid=2637 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200596975.870:165): avc:  denied  { unlink } for  pid=2748 comm="ssh-agent" name="agent.2747" dev=dm-0 ino=327604 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200596975.870:165): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff94426ed0 a2=7fff94426da0 a3=0 items=0 ppid=1 pid=2748 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200596975.871:166): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=DAEMON_END msg=audit(1200596990.175:3923): auditd normal halt, sending auid=4294967295 pid=13636 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1882
>type=DAEMON_START msg=audit(1200600514.191:1104): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1890 res=success, auditd pid=1890
>type=CONFIG_CHANGE msg=audit(1200600514.291:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200600514.291:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200600514.327:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200600514.327:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200600518.727:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200600518.727:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200600520.408:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200600520.409:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200600536.822:12): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200600536.840:13): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200600536.892:14): avc:  denied  { create } for  pid=2753 comm="ssh-agent" name="agent.2753" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200600536.892:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff283259f0 a2=6e a3=0 items=0 ppid=2645 pid=2753 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200600536.893:15): avc:  denied  { write } for  pid=2645 comm="login" name="agent.2753" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200600536.893:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffcf12d4b0 a2=6e a3=0 items=0 ppid=1 pid=2645 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200600536.894:16): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200600536.901:17): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200600536.915:18): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600656.311:19): user pid=3180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200600657.560:20): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600657.561:21): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200600657.561:22): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600657.561:23): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600657.561:24): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600657.566:25): user pid=3214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200600657.580:26): user pid=3220 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200600657.594:27): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600657.612:28): user pid=3227 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600657.613:29): user pid=3227 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200600729.218:30): user pid=3383 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1200600841.058:31): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200600841.061:32): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200600841.062:33): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200600841.062:34): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200600841.062:35): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200600848.154:36): avc:  denied  { search } for  pid=6717 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200600848.154:36): arch=c000003e syscall=21 success=yes exit=0 a0=7fffe02bafa8 a1=4 a2=0 a3=7fffe02b8d33 items=0 ppid=6713 pid=6717 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200602580.799:37): user pid=15325 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200602580.799:38): user pid=15325 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200602580.799:39): user pid=15325 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200602595.580:40): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1200602598.332:41): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200602598.334:42): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200602598.346:43): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200602598.347:44): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200602598.347:45): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200602598.348:46): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200602598.354:47): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200602598.354:48): user pid=15332 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200602598.418:49): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200602598.419:50): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200602598.434:51): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200602598.435:52): avc:  denied  { unlink } for  pid=2754 comm="ssh-agent" name="agent.2753" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200602598.435:52): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff28325200 a2=7fff283250d0 a3=0 items=0 ppid=1 pid=2754 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200602598.436:53): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=DAEMON_END msg=audit(1200602608.282:1105): auditd normal halt, sending auid=4294967295 pid=15837 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1890
>type=DAEMON_START msg=audit(1200857610.158:8018): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1938 res=success, auditd pid=1938
>type=CONFIG_CHANGE msg=audit(1200857610.258:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200857610.258:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200857610.293:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200857610.293:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200857614.926:8): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200857614.926:9): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200857616.981:10): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200857616.981:11): user pid=2141 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200857633.950:12): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200857633.968:13): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200857634.020:14): avc:  denied  { create } for  pid=2806 comm="ssh-agent" name="agent.2806" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200857634.020:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2df11470 a2=6e a3=0 items=0 ppid=2696 pid=2806 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200857634.021:15): avc:  denied  { write } for  pid=2696 comm="login" name="agent.2806" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200857634.021:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff3c66f9f0 a2=6e a3=0 items=0 ppid=1 pid=2696 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200857634.022:16): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200857634.029:17): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200857634.042:18): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200857641.455:19): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200857641.458:20): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200857641.459:21): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200857641.460:22): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200857641.460:23): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200857641.460:24): user pid=2929 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200857716.362:25): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1200857716.380:26): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1200857720.385:27): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200857720.388:28): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200857720.389:29): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200857720.389:30): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200857720.390:31): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200857753.085:32): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200857753.088:33): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200857753.145:34): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200857753.146:35): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200857753.146:36): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200857753.147:37): user pid=3206 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/mount" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200857759.475:38): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200857759.475:39): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200857759.476:40): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200857759.476:41): user pid=3222 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/mount" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200857789.685:42): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200857789.686:43): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200857789.686:44): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200857789.687:45): user pid=3276 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/umount" (terminal=tty2 res=success)'
>type=AVC msg=audit(1200857797.035:46): avc:  denied  { read write } for  pid=3286 comm="groupadd" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200857797.035:46): arch=c000003e syscall=59 success=yes exit=0 a0=8c9b00 a1=8c8280 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3285 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200857797.076:47): user pid=3286 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1200857797.077:48): avc:  denied  { read write } for  pid=3287 comm="useradd" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200857797.077:48): arch=c000003e syscall=59 success=yes exit=0 a0=8ca800 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3285 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200857797.134:49): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1200857797.135:50): avc:  denied  { read write } for  pid=3288 comm="groupadd" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200857797.135:50): arch=c000003e syscall=59 success=yes exit=0 a0=8caae0 a1=8cad30 a2=8c7fd0 a3=65 items=0 ppid=3285 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1200857797.137:51): user pid=3288 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200857797.139:52): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CMD msg=audit(1200857801.469:53): user pid=3296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="uumount" (terminal=tty2 res=failed)'
>type=CRED_ACQ msg=audit(1200857814.208:54): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200857814.209:55): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200857814.209:56): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1200857814.209:57): user pid=3315 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/bin/umount" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200857865.219:58): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200857865.221:59): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200857865.222:60): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200857865.222:61): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200857865.222:62): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200857874.198:63): avc:  denied  { search } for  pid=5147 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200857874.198:63): arch=c000003e syscall=21 success=yes exit=0 a0=7fff6c353fa8 a1=4 a2=0 a3=7fff6c351dd3 items=0 ppid=5141 pid=5147 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=AVC msg=audit(1200857927.749:64): avc:  denied  { read write } for  pid=12932 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200857927.749:64): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccf90 a1=2aaab28ddfa0 a2=0 a3=0 items=0 ppid=9262 pid=12932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200857928.525:65): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200857927.972:66): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200857927.972:66): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=9262 pid=12932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200857984.209:67): user pid=29514 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1200857993.016:68): avc:  denied  { read write } for  pid=30668 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200857993.016:68): arch=c000003e syscall=59 success=yes exit=0 a0=1478000 a1=1b3c2d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=29515 pid=30668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200857993.475:69): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200857993.157:70): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200857993.157:70): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=29515 pid=30668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200857993.908:71): user pid=29515 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200858002.928:72): avc:  denied  { read write } for  pid=32180 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200858002.928:72): arch=c000003e syscall=59 success=yes exit=0 a0=1becd10 a1=8dcc060 a2=0 a3=2aaaaaaeb210 items=0 ppid=30675 pid=32180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200858003.371:73): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200858003.070:74): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200858003.070:74): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=30675 pid=32180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200858003.777:75): user pid=30675 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1200858005.113:76): user pid=32183 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1200858013.816:77): avc:  denied  { read write } for  pid=32719 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200858013.816:77): arch=c000003e syscall=59 success=yes exit=0 a0=1478000 a1=1b3c2d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=32184 pid=32719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1200858013.930:78): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1200858013.933:79): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1200858013.935:80): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1200858013.935:81): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1200858013.935:82): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AVC msg=audit(1200858014.273:83): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200858013.975:84): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200858013.975:84): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=32184 pid=32719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200858014.743:85): user pid=32184 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200858023.290:86): avc:  denied  { read write } for  pid=3080 comm="load_policy" name="tty1" dev=tmpfs ino=2575 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1200858023.290:86): arch=c000003e syscall=59 success=yes exit=0 a0=1becd10 a1=8dcc060 a2=0 a3=2aaaaaaeb210 items=0 ppid=788 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1200858023.749:87): user pid=2158 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1200858023.442:88): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1200858023.442:88): arch=c000003e syscall=1 success=yes exit=4054715 a0=4 a1=2aaaab87a000 a2=3ddebb a3=0 items=0 ppid=788 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1200858024.194:89): user pid=788 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858375.560:90): user pid=25809 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200858377.370:91): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858377.370:92): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200858377.370:93): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858377.370:94): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858377.371:95): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858377.376:96): user pid=25847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200858377.410:97): user pid=25855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200858377.443:98): user pid=25859 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858377.473:99): user pid=25866 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858377.473:100): user pid=25866 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858498.665:101): user pid=26096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858498.671:102): user pid=26100 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858500.541:103): user pid=26132 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200858515.962:104): user pid=26605 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1200858703.904:105): auid=4294967295 uid=500 gid=101 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 pid=15341 comm="lt-gst" sig=11
>type=USER_ACCT msg=audit(1200859261.434:106): user pid=16452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200859261.436:107): user pid=16452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200859261.436:108): login pid=16452 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200859261.453:109): user pid=16452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200859261.665:110): user pid=16452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200859261.666:111): user pid=16452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.605:112): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.605:113): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200859558.605:114): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.605:115): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.605:116): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.611:117): user pid=16938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200859558.623:118): user pid=16944 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200859558.638:119): user pid=16946 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.660:120): user pid=16951 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200859558.660:121): user pid=16951 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200860398.955:122): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200860398.995:123): user pid=2697 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200860761.933:124): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200860761.935:125): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200860761.965:126): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200860761.965:127): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200860783.027:128): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200860783.028:129): user pid=20573 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200860876.978:130): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200860876.981:131): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200860876.981:132): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200860876.982:133): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200860876.982:134): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200860876.982:135): user pid=21055 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel/smalltalk-3.0/packages/sport" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200861058.040:136): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200861058.043:137): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200861058.044:138): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200861058.044:139): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200861058.045:140): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861286.100:141): user pid=22162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861288.015:142): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861288.015:143): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861288.016:144): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861288.016:145): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861288.016:146): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861288.032:147): user pid=22211 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861288.045:148): user pid=22217 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861288.060:149): user pid=22219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861288.078:150): user pid=22224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861288.079:151): user pid=22224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861321.866:152): user pid=22346 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861321.871:153): user pid=22350 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861333.164:154): user pid=22793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861337.606:155): user pid=22835 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861607.414:156): user pid=11439 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861609.003:157): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861609.004:158): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861609.004:159): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861609.004:160): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861609.004:161): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861609.019:162): user pid=11478 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861609.053:163): user pid=11487 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200861609.081:164): user pid=11491 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861609.120:165): user pid=11498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861609.120:166): user pid=11498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861628.118:167): user pid=11609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861628.123:168): user pid=11613 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861630.012:169): user pid=11647 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200861644.917:170): user pid=12120 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200862861.868:171): user pid=1823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200862861.869:172): user pid=1823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200862861.870:173): login pid=1823 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200862861.934:174): user pid=1823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200862862.148:175): user pid=1823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200862862.149:176): user pid=1823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1200863203.720:177): avc:  denied  { getattr } for  pid=2468 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863203.720:177): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa812a280 a1=7fffa81161f0 a2=7fffa81161f0 a3=7fffa812a28d items=0 ppid=1 pid=2468 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1200863203.720:178): avc:  denied  { search } for  pid=2468 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863203.720:178): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa812a280 a1=7fffa81161f0 a2=7fffa81161f0 a3=7fffa812a28d items=0 ppid=1 pid=2468 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1200863203.930:179): avc:  denied  { search } for  pid=2474 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863203.930:179): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fffdc602c30 a2=7fffdc602c30 a3=61931b items=0 ppid=2468 pid=2474 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_START msg=audit(1200863204.208:180): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1200863204.208:181): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200863214.350:182): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200863214.350:183): user pid=2484 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1200863214.422:184): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1200863214.422:185): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1200863471.315:186): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1200863471.316:187): user pid=2510 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1200863830.921:188): avc:  denied  { getattr } for  pid=5568 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863830.921:188): arch=c000003e syscall=6 success=yes exit=0 a0=604443 a1=7fff5add0730 a2=7fff5add0730 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200863830.921:189): avc:  denied  { search } for  pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863830.921:189): arch=c000003e syscall=80 success=yes exit=0 a0=604443 a1=7fff5add0430 a2=0 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200863830.921:190): avc:  denied  { read } for  pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863830.921:190): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200863830.935:191): avc:  denied  { getattr } for  pid=5568 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200863830.935:191): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff5add05a0 a2=7fff5add05a0 a3=3688d529f0 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200863830.935:192): avc:  denied  { setattr } for  pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863830.935:192): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff5add0630 a2=3688d529d8 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200863830.935:193): avc:  denied  { rmdir } for  pid=5568 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200863830.935:193): arch=c000003e syscall=84 success=no exit=-39 a0=604443 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1200863831.034:194): avc:  denied  { getattr } for  pid=5568 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1200863831.034:194): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff5add05a0 a2=7fff5add05a0 a3=3688b22902 items=0 ppid=5566 pid=5568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200863878.100:195): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200863878.103:196): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200863878.122:197): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200863878.123:198): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200863878.123:199): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200863878.124:200): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200863878.180:201): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200863878.180:202): user pid=5680 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200863878.268:203): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1200863878.270:204): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200863878.270:205): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200863878.271:206): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200863878.293:207): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200863878.294:208): user pid=20223 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200863878.294:209): user pid=2701 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200863878.294:210): avc:  denied  { unlink } for  pid=2807 comm="ssh-agent" name="agent.2806" dev=dm-0 ino=327606 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200863878.294:210): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2df10c80 a2=7fff2df10b50 a3=0 items=0 ppid=1 pid=2807 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200863878.295:211): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=DAEMON_END msg=audit(1200863892.593:8019): auditd normal halt, sending auid=4294967295 pid=6188 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1938
>type=DAEMON_START msg=audit(1200931819.307:2575): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1891 res=success, auditd pid=1891
>type=CONFIG_CHANGE msg=audit(1200931819.407:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200931819.407:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200931819.443:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200931819.443:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200931823.943:8): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200931823.943:9): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200931825.492:10): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200931825.492:11): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200931849.451:12): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200931849.469:13): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200931849.521:14): avc:  denied  { create } for  pid=2757 comm="ssh-agent" name="agent.2757" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200931849.521:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff137c5090 a2=6e a3=0 items=0 ppid=2646 pid=2757 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200931849.523:15): avc:  denied  { write } for  pid=2646 comm="login" name="agent.2757" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200931849.523:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff30842bc0 a2=6e a3=0 items=0 ppid=1 pid=2646 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200931849.523:16): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200931849.531:17): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200931849.544:18): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200931862.143:19): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200931862.146:20): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200931862.147:21): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200931862.148:22): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200931862.148:23): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1200931862.149:24): user pid=2880 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200932018.211:25): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200932018.214:26): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200932018.215:27): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200932018.215:28): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200932018.216:29): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200932024.584:30): avc:  denied  { search } for  pid=3413 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200932024.584:30): arch=c000003e syscall=21 success=yes exit=0 a0=7fff3f6fdfa8 a1=4 a2=0 a3=7fff3f6fd173 items=0 ppid=3412 pid=3413 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1200932027.246:31): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=3467 comm="pulseaudio" sig=6
>type=USER_AUTH msg=audit(1200933897.288:32): user pid=5945 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200933897.288:33): user pid=5945 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200933897.288:34): user pid=5945 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200933938.397:35): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200933938.400:36): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200933938.400:37): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200933938.401:38): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200933938.401:39): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200933938.402:40): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200933938.408:41): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200933938.408:42): user pid=6021 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200933938.487:43): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200933938.487:44): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200933938.490:45): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200933938.490:46): avc:  denied  { unlink } for  pid=2758 comm="ssh-agent" name="agent.2757" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200933938.490:46): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff137c48a0 a2=7fff137c4770 a3=0 items=0 ppid=1 pid=2758 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200933938.491:47): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=DAEMON_END msg=audit(1200933947.778:2576): auditd normal halt, sending auid=4294967295 pid=6527 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1891
>type=DAEMON_START msg=audit(1200935109.324:5771): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1888 res=success, auditd pid=1888
>type=CONFIG_CHANGE msg=audit(1200935109.424:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200935109.424:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200935109.459:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200935109.459:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200935113.943:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200935113.943:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200935115.998:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200935115.998:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200935147.144:12): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1200935147.156:13): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1200935151.061:14): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200935151.079:15): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200935151.131:16): avc:  denied  { create } for  pid=2756 comm="ssh-agent" name="agent.2756" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200935151.131:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff00069ed0 a2=6e a3=0 items=0 ppid=2643 pid=2756 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200935151.133:17): avc:  denied  { write } for  pid=2643 comm="login" name="agent.2756" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200935151.133:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff8ee97220 a2=6e a3=0 items=0 ppid=1 pid=2643 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200935151.134:18): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200935151.141:19): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200935151.154:20): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200935175.906:21): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200935175.908:22): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200935175.956:23): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200935175.956:24): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200935187.764:25): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200935187.765:26): user pid=2882 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200935454.654:27): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200935454.656:28): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200935454.658:29): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200935454.658:30): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200935454.658:31): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200935464.516:32): avc:  denied  { search } for  pid=3804 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200935464.516:32): arch=c000003e syscall=21 success=yes exit=0 a0=7fff62fb7fa8 a1=4 a2=0 a3=7fff62fb6a33 items=0 ppid=3803 pid=3804 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_AUTH msg=audit(1200937435.008:33): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200937435.011:34): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200937435.012:35): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200937435.012:36): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200937435.013:37): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200937544.642:38): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1200937544.645:39): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1200937544.647:40): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1200937544.647:41): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1200937544.647:42): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1200937608.417:43): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1200937608.418:44): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937646.787:45): user pid=8855 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937646.793:46): user pid=8859 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937646.881:47): user pid=8865 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937653.174:48): user pid=8917 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937653.862:49): user pid=8938 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937653.867:50): user pid=8942 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937654.980:51): user pid=8963 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200937654.992:52): user pid=8965 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1200937655.005:53): user pid=8967 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937655.022:54): user pid=8972 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1200937655.027:55): user pid=8972 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1200938461.162:56): user pid=10975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200938461.163:57): user pid=10975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200938461.164:58): login pid=10975 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200938461.179:59): user pid=10975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200938461.311:60): user pid=10975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200938461.312:61): user pid=10975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200939552.987:62): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200939552.989:63): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200939552.996:64): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200939552.996:65): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200939612.321:66): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200939612.324:67): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200939612.324:68): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200939612.325:69): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200939612.325:70): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200939612.326:71): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200939612.422:72): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200939612.422:73): user pid=13152 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200939612.494:74): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200939612.495:75): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200939612.495:76): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200939612.495:77): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200939612.496:78): user pid=12712 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200939612.496:79): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200939612.497:80): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200939612.498:81): avc:  denied  { unlink } for  pid=2757 comm="ssh-agent" name="agent.2756" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200939612.498:81): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff000696e0 a2=7fff000695b0 a3=0 items=0 ppid=1 pid=2757 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1200939612.499:82): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=DAEMON_END msg=audit(1200939621.672:5772): auditd normal halt, sending auid=4294967295 pid=13657 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1888
>type=DAEMON_START msg=audit(1200941252.601:5148): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1887 res=success, auditd pid=1887
>type=CONFIG_CHANGE msg=audit(1200941252.700:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200941252.700:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1200941252.736:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1200941252.736:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1200941257.053:8): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1200941257.053:9): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1200941259.209:10): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1200941259.210:11): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1200941312.507:12): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200941312.525:13): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1200941312.577:14): avc:  denied  { create } for  pid=2751 comm="ssh-agent" name="agent.2751" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200941312.577:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff89a1de70 a2=6e a3=0 items=0 ppid=2642 pid=2751 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1200941312.579:15): avc:  denied  { write } for  pid=2642 comm="login" name="agent.2751" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200941312.579:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff13c9b020 a2=6e a3=0 items=0 ppid=1 pid=2642 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1200941312.579:16): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200941312.587:17): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1200941312.600:18): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200941323.196:19): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1200941323.199:20): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1200941323.247:21): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1200941323.247:22): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200941357.675:23): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200941357.676:24): user pid=2877 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1200941581.677:25): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200941581.680:26): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200941581.681:27): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200941581.681:28): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1200941581.681:29): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200941589.209:30): avc:  denied  { search } for  pid=3915 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1200941589.209:30): arch=c000003e syscall=21 success=yes exit=0 a0=7fff97660fa8 a1=4 a2=0 a3=7fff976600d3 items=0 ppid=3914 pid=3915 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_ACCT msg=audit(1200942061.477:31): user pid=4978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1200942061.479:32): user pid=4978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1200942061.479:33): login pid=4978 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1200942061.494:34): user pid=4978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1200942061.604:35): user pid=4978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1200942061.605:36): user pid=4978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1200943494.699:37): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1200943494.702:38): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1200943494.704:39): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1200943494.704:40): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1200943494.704:41): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1200945463.657:42): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200945463.660:43): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1200945463.660:44): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1200945463.661:45): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200945463.661:46): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1200945463.662:47): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1200945463.752:48): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1200945463.752:49): user pid=9004 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1200945463.957:50): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1200945463.958:51): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1200945463.958:52): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1200945463.958:53): user pid=2642 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1200945463.960:54): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1200945463.960:55): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1200945463.960:56): avc:  denied  { unlink } for  pid=2752 comm="ssh-agent" name="agent.2751" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1200945463.960:56): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff89a1d680 a2=7fff89a1d550 a3=0 items=0 ppid=1 pid=2752 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1200945473.235:5149): auditd normal halt, sending auid=4294967295 pid=9509 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1887
>type=DAEMON_START msg=audit(1201013538.283:2910): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1888 res=success, auditd pid=1888
>type=CONFIG_CHANGE msg=audit(1201013538.382:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201013538.382:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201013538.418:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201013538.418:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201013542.984:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201013542.984:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201013545.437:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201013545.438:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201013561.460:12): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201013561.478:13): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201013561.531:14): avc:  denied  { create } for  pid=2752 comm="ssh-agent" name="agent.2752" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201013561.531:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffcc333e70 a2=6e a3=0 items=0 ppid=2643 pid=2752 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201013561.532:15): avc:  denied  { write } for  pid=2643 comm="login" name="agent.2752" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201013561.532:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff3dfad330 a2=6e a3=0 items=0 ppid=1 pid=2643 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201013561.532:16): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201013561.540:17): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201013561.553:18): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201013573.861:19): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201013573.864:20): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201013573.879:21): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201013573.880:22): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201013573.880:23): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201013573.881:24): user pid=2876 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201013593.120:25): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201013593.123:26): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201013593.124:27): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201013593.124:28): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201013593.124:29): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201014061.422:30): user pid=3850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201014061.424:31): user pid=3850 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201014061.424:32): login pid=3850 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201014061.455:33): user pid=3850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201014061.576:34): user pid=3850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201014061.577:35): user pid=3850 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201014124.874:36): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1201014124.876:37): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1201014124.877:38): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1201014124.877:39): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1201014124.878:40): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1201014131.613:41): avc:  denied  { search } for  pid=5236 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201014131.613:41): arch=c000003e syscall=21 success=yes exit=0 a0=7fff32549fa8 a1=4 a2=0 a3=7fff325495c3 items=0 ppid=5235 pid=5236 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_AUTH msg=audit(1201014607.985:42): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201014608.021:43): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201014608.483:44): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201014608.501:45): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201014795.126:46): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201014795.129:47): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201014795.145:48): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201014795.145:49): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1201014795.215:50): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201014847.035:51): user pid=10618 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201014848.561:52): user pid=10656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201014848.573:53): user pid=10658 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201014848.585:54): user pid=10660 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201014848.604:55): user pid=10665 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201014848.604:56): user pid=10665 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201014992.095:57): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201014992.096:58): user pid=9589 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015029.652:59): user pid=10927 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015029.657:60): user pid=10931 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015049.199:61): user pid=11018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015057.191:62): user pid=11063 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015080.130:63): user pid=11147 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015080.939:64): user pid=11161 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=avahi exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015080.947:65): user pid=11166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=avahi exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015083.319:66): user pid=11189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.807:67): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.808:68): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201015788.808:69): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.808:70): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.808:71): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.814:72): user pid=12808 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201015788.827:73): user pid=12814 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201015788.840:74): user pid=12816 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.860:75): user pid=12821 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201015788.860:76): user pid=12821 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016028.884:77): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016028.891:78): user pid=13129 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016038.426:79): user pid=13195 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016043.898:80): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016043.905:81): user pid=13239 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016044.298:82): user pid=13248 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016045.441:83): user pid=13279 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201016045.456:84): user pid=13281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201016045.469:85): user pid=13283 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016045.485:86): user pid=13288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016045.489:87): user pid=13288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201016308.837:88): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201016308.865:89): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201016309.012:90): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201016309.025:91): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201016507.470:92): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201016507.472:93): user pid=13651 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016676.100:94): user pid=15023 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016686.647:95): user pid=15086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=avahi exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016686.654:96): user pid=15091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=avahi exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016686.925:97): user pid=15104 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utempter exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016709.926:98): user pid=15243 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201016725.160:99): user pid=15282 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.614:100): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.614:101): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201017405.614:102): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.614:103): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.614:104): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.648:105): user pid=18958 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201017405.662:106): user pid=18964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201017405.677:107): user pid=18966 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.696:108): user pid=18971 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017405.697:109): user pid=18971 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.177:110): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.178:111): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201017508.178:112): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.178:113): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.178:114): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.182:115): user pid=19162 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201017508.197:116): user pid=19168 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201017508.209:117): user pid=19170 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.226:118): user pid=19175 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017508.229:119): user pid=19175 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017577.719:120): user pid=19299 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=polkituser exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017585.763:121): user pid=19357 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=avahi exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017585.770:122): user pid=19362 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=avahi exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017586.078:123): user pid=19375 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utempter exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017610.551:124): user pid=19516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201017624.481:125): user pid=19547 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201017662.917:126): user pid=20534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201017662.919:127): user pid=20534 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201017662.919:128): login pid=20534 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201017663.839:129): user pid=20534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201017664.553:130): user pid=20534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201017664.554:131): user pid=20534 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201019132.793:132): avc:  denied  { getattr } for  pid=24788 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019132.793:132): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc88d5a20 a1=7fffc88c1990 a2=7fffc88c1990 a3=7fffc88d5a2d items=0 ppid=1 pid=24788 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201019132.793:133): avc:  denied  { search } for  pid=24788 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019132.793:133): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc88d5a20 a1=7fffc88c1990 a2=7fffc88c1990 a3=7fffc88d5a2d items=0 ppid=1 pid=24788 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201019133.085:134): avc:  denied  { search } for  pid=24802 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019133.085:134): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fff94ae7650 a2=7fff94ae7650 a3=61931b items=0 ppid=24788 pid=24802 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_START msg=audit(1201019133.527:135): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201019133.527:136): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201019145.123:137): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201019145.123:138): user pid=24803 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201019145.163:139): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201019145.163:140): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201019397.043:141): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201019397.044:142): user pid=24835 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201019802.136:143): avc:  denied  { getattr } for  pid=30451 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019802.136:143): arch=c000003e syscall=6 success=yes exit=0 a0=6043db a1=7fffd0e557b0 a2=7fffd0e557b0 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201019802.136:144): avc:  denied  { search } for  pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019802.136:144): arch=c000003e syscall=80 success=yes exit=0 a0=6043db a1=7fffd0e554b0 a2=0 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201019802.136:145): avc:  denied  { read } for  pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019802.136:145): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201019802.143:146): avc:  denied  { getattr } for  pid=30451 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201019802.143:146): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffd0e55620 a2=7fffd0e55620 a3=3688d529f0 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201019802.143:147): avc:  denied  { setattr } for  pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019802.143:147): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffd0e556b0 a2=3688d529d8 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201019802.143:148): avc:  denied  { rmdir } for  pid=30451 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201019802.143:148): arch=c000003e syscall=84 success=no exit=-39 a0=6043db a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201019802.250:149): avc:  denied  { getattr } for  pid=30451 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1201019802.250:149): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffd0e55620 a2=7fffd0e55620 a3=3688b22902 items=0 ppid=30449 pid=30451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201021261.639:150): user pid=32380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201021261.640:151): user pid=32380 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201021261.640:152): login pid=32380 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201021261.676:153): user pid=32380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201021261.753:154): user pid=32380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201021261.754:155): user pid=32380 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201022430.413:156): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1201022430.415:157): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1201022430.452:158): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1201022430.453:159): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1201022430.453:160): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1201022430.454:161): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1201022430.510:162): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1201022430.511:163): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1201022430.717:164): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1201022430.845:165): user pid=2648 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1201022430.885:166): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201022430.890:167): user pid=2643 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201022430.901:168): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201022430.907:169): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1201022430.928:170): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201022430.934:171): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201022430.943:172): avc:  denied  { unlink } for  pid=2753 comm="ssh-agent" name="agent.2752" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201022430.943:172): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffcc333680 a2=7fffcc333550 a3=0 items=0 ppid=1 pid=2753 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1201022449.784:2911): auditd normal halt, sending auid=4294967295 pid=3792 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1888
>type=DAEMON_START msg=audit(1201100851.191:810): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1885 res=success, auditd pid=1885
>type=CONFIG_CHANGE msg=audit(1201100851.291:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201100851.291:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201100851.326:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201100851.326:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201100855.827:8): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201100855.827:9): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201100857.351:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201100857.351:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201100884.843:12): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201100884.861:13): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201100884.922:14): avc:  denied  { create } for  pid=2748 comm="ssh-agent" name="agent.2748" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201100884.922:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffdf8aa0e0 a2=6e a3=0 items=0 ppid=2640 pid=2748 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201100884.923:15): avc:  denied  { write } for  pid=2640 comm="login" name="agent.2748" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201100884.923:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff88d230a0 a2=6e a3=0 items=0 ppid=1 pid=2640 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201100884.923:16): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201100884.931:17): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201100884.944:18): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201100897.172:19): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201100897.175:20): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201100897.176:21): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201100897.177:22): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201100897.177:23): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201100897.178:24): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201101209.970:25): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201101209.970:26): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201101210.048:27): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201101210.049:28): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201101210.084:29): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201101210.085:30): user pid=3171 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=news exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201101210.204:31): avc:  denied  { write } for  pid=2062 comm="rsyslogd" name="news" dev=dm-2 ino=31786 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:innd_log_t:s0 tclass=dir
>type=AVC msg=audit(1201101210.204:31): avc:  denied  { add_name } for  pid=2062 comm="rsyslogd" name="news.debug" scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:innd_log_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201101210.204:31): arch=c000003e syscall=2 success=yes exit=11 a0=63cf10 a1=541 a2=1a4 a3=63cb60 items=0 ppid=1 pid=2062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="rsyslogd" exe="/sbin/rsyslogd" subj=system_u:system_r:syslogd_t:s0 key=(null)
>type=AVC msg=audit(1201101210.243:32): avc:  denied  { read write } for  pid=3186 comm="groupadd" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101210.243:32): arch=c000003e syscall=59 success=yes exit=0 a0=8ca0b0 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=3185 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201101210.274:33): avc:  denied  { read write } for  pid=3187 comm="useradd" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101210.274:33): arch=c000003e syscall=59 success=yes exit=0 a0=8caa10 a1=8c9450 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3185 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201101210.331:34): avc:  denied  { ioctl } for  pid=3187 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101210.331:34): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffd5d498e0 a3=0 items=0 ppid=3185 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201101210.331:35): avc:  denied  { getattr } for  pid=3187 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101210.331:35): arch=c000003e syscall=6 success=yes exit=0 a0=7fffd5d4df80 a1=7fffd5d49af0 a2=7fffd5d49af0 a3=0 items=0 ppid=3185 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201101210.331:36): user pid=3187 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1201101383.032:37): avc:  denied  { read write } for  pid=3419 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101383.032:37): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccf90 a1=2aaab28c3270 a2=0 a3=0 items=0 ppid=3399 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201101383.561:38): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201101383.171:39): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201101383.171:39): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3399 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1201101481.650:811): auditd normal halt, sending auid=4294967295 pid=3601 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1885
>type=DAEMON_START msg=audit(1201101481.788:7962): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=3623 res=success
>type=CONFIG_CHANGE msg=audit(1201101481.888:42): audit_enabled=1 old=1 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201101481.888:43): audit_enabled=1 old=1 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201101481.902:44): audit_backlog_limit=320 old=320 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201101481.902:45): audit_backlog_limit=320 old=320 by auid=4294967295 res=1
>type=USER_ROLE_CHANGE msg=audit(1201101489.629:46): user pid=3639 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1201101497.259:47): avc:  denied  { read write } for  pid=3647 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101497.259:47): arch=c000003e syscall=59 success=yes exit=0 a0=b17430 a1=20738d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3640 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201101497.787:48): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201101497.403:49): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201101497.403:49): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3640 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201101498.228:50): user pid=3640 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201101506.109:51): avc:  denied  { read write } for  pid=3656 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101506.109:51): arch=c000003e syscall=59 success=yes exit=0 a0=181caf0 a1=47bd0d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3649 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201101506.589:52): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201101506.238:53): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201101506.238:53): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3649 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201101507.028:54): user pid=3649 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1201101508.540:55): user pid=3659 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1201101516.770:56): avc:  denied  { read write } for  pid=3667 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101516.770:56): arch=c000003e syscall=59 success=yes exit=0 a0=b17430 a1=20738d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3660 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201101517.211:57): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201101516.907:58): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201101516.907:58): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3660 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201101517.621:59): user pid=3660 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201101525.567:60): avc:  denied  { read write } for  pid=3676 comm="load_policy" name="tty1" dev=tmpfs ino=2606 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201101525.567:60): arch=c000003e syscall=59 success=yes exit=0 a0=181caf0 a1=47bd0d0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3669 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201101525.999:61): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201101525.701:62): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201101525.701:62): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=3669 pid=3676 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201101526.452:63): user pid=3669 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201101578.439:64): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201101578.442:65): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201101578.443:66): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201101578.444:67): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201101578.444:68): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201101578.444:69): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201101578.561:70): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201101578.561:71): user pid=3793 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201101578.669:72): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201101578.670:73): user pid=2640 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201101578.670:74): avc:  denied  { unlink } for  pid=2749 comm="ssh-agent" name="agent.2748" dev=dm-0 ino=296802 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201101578.670:74): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffdf8a98f0 a2=7fffdf8a97c0 a3=0 items=0 ppid=1 pid=2749 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1201101585.518:7963): auditd normal halt, sending auid=4294967295 pid=4198 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201103721.789:6944): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2062 res=success
>type=CONFIG_CHANGE msg=audit(1201103721.889:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201103721.889:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201103722.193:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201103722.193:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201103723.234:8): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201103723.234:9): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201103725.123:10): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201103725.123:11): user pid=2085 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201103857.377:12): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1201103882.293:13): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201103882.307:14): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201103882.385:15): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201103882.501:16): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1201103917.187:17): avc:  denied  { execheap } for  pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201103917.187:17): arch=c000003e syscall=10 success=yes exit=0 a0=f08000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1201104061.840:18): user pid=3822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201104061.841:19): user pid=3822 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201104061.841:20): login pid=3822 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201104061.892:21): user pid=3822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201104062.043:22): user pid=3822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201104062.044:23): user pid=3822 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201105595.735:24): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201105595.736:25): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1201105602.698:6945): auditd normal halt, sending auid=4294967295 pid=5729 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201108404.580:3962): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2068 res=success
>type=CONFIG_CHANGE msg=audit(1201108404.679:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201108404.679:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201108404.986:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201108404.986:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201108406.043:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201108406.043:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201108407.832:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201108407.832:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201108443.062:12): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201108443.080:13): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201108443.166:14): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201108443.257:15): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1201108445.881:16): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3068 comm="pulseaudio" sig=6
>type=USER_AUTH msg=audit(1201108453.224:17): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201108453.227:18): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201108453.228:19): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201108453.229:20): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201108453.229:21): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201108477.393:22): avc:  denied  { execheap } for  pid=3317 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201108477.393:22): arch=c000003e syscall=10 success=yes exit=0 a0=eff000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3317 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201108544.625:23): avc:  denied  { execheap } for  pid=4770 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201108544.625:23): arch=c000003e syscall=10 success=yes exit=0 a0=1076000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4770 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201108563.731:24): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201108563.734:25): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201108563.736:26): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201108563.736:27): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201108563.737:28): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.928:29): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.928:30): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201108675.928:31): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.928:32): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.928:33): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.936:34): user pid=11050 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201108675.950:35): user pid=11056 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201108675.965:36): user pid=11058 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.983:37): user pid=11063 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108675.984:38): user pid=11063 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108687.642:39): user pid=11133 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.364:40): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.364:41): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201108832.364:42): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.364:43): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.365:44): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.371:45): user pid=11782 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201108832.386:46): user pid=11788 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201108832.401:47): user pid=11790 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.419:48): user pid=11795 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108832.419:49): user pid=11795 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201108843.833:50): user pid=11860 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.388:51): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.388:52): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201109837.388:53): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.388:54): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.388:55): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.450:56): user pid=22285 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201109837.463:57): user pid=22291 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201109837.476:58): user pid=22293 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.491:59): user pid=22298 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109837.491:60): user pid=22298 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201109845.327:61): user pid=22346 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.813:62): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.813:63): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201110187.813:64): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.813:65): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.814:66): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.818:67): user pid=23303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201110187.832:68): user pid=23309 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201110187.847:69): user pid=23311 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.866:70): user pid=23316 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110187.866:71): user pid=23316 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110202.069:72): user pid=23411 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110582.956:73): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110582.956:74): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201110582.957:75): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110582.957:76): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110582.957:77): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110582.962:78): user pid=26701 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201110582.975:79): user pid=26707 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201110582.988:80): user pid=26709 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110583.005:81): user pid=26714 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110583.006:82): user pid=26714 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201110589.241:83): user pid=26752 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201111261.814:84): user pid=30782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201111261.815:85): user pid=30782 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201111261.815:86): login pid=30782 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201111261.902:87): user pid=30782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201111262.152:88): user pid=30782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201111262.153:89): user pid=30782 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.358:90): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.358:91): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111326.358:92): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.358:93): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.358:94): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.364:95): user pid=31166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111326.377:96): user pid=31172 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111326.391:97): user pid=31174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.408:98): user pid=31179 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111326.408:99): user pid=31179 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111333.302:100): user pid=31224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.080:101): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.080:102): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111584.080:103): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.080:104): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.080:105): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.086:106): user pid=32140 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111584.098:107): user pid=32146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111584.111:108): user pid=32148 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.131:109): user pid=32153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111584.132:110): user pid=32153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111627.245:111): user pid=4672 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.490:112): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.490:113): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111685.490:114): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.491:115): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.491:116): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.498:117): user pid=8567 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111685.511:118): user pid=8573 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201111685.525:119): user pid=8575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.549:120): user pid=8580 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111685.549:121): user pid=8580 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201111697.093:122): user pid=8642 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112136.940:123): user pid=15989 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=rpm res=success'
>type=USER_CHAUTHTOK msg=audit(1201112136.959:124): user pid=15990 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=rpm res=success'
>type=USER_CHAUTHTOK msg=audit(1201112138.185:125): user pid=16003 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=dbus res=success'
>type=USER_CHAUTHTOK msg=audit(1201112146.925:126): user pid=16030 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112147.432:127): user pid=16043 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=floppy res=success'
>type=USER_CHAUTHTOK msg=audit(1201112147.441:128): user pid=16044 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=vcsa res=success'
>type=USER_CHAUTHTOK msg=audit(1201112150.185:129): user pid=16333 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=utmp res=success'
>type=USER_CHAUTHTOK msg=audit(1201112150.507:130): user pid=16339 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201112150.542:131): user pid=16343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201112150.571:132): user pid=16347 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112150.684:133): user pid=16354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112150.684:134): user pid=16354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112151.254:135): user pid=16377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=haldaemon res=success'
>type=USER_CHAUTHTOK msg=audit(1201112158.667:136): user pid=16586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting user not found acct=mockbuild res=failed'
>type=USER_CHAUTHTOK msg=audit(1201112158.682:137): user pid=16588 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupdel: op=deleting group acct=mockbuild res=failed'
>type=USER_CHAUTHTOK msg=audit(1201112158.695:138): user pid=16590 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201112158.717:139): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201112158.717:140): user pid=16592 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding home directory acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201112192.549:141): user pid=16662 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.114:142): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.114:143): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201112378.114:144): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting mail file acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.114:145): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.114:146): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.122:147): user pid=24174 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201112378.156:148): user pid=24182 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201112378.189:149): user pid=24186 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.225:150): user pid=24193 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112378.226:151): user pid=24193 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201112382.097:152): user pid=24249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201113154.406:153): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting user entries acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113154.406:154): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting mail file acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113154.406:155): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113154.406:156): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113154.413:157): user pid=26337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=failed'
>type=USER_CHAUTHTOK msg=audit(1201113154.425:158): user pid=26339 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupdel: op=deleting group acct=mockbuild res=failed'
>type=USER_CHAUTHTOK msg=audit(1201113154.440:159): user pid=26341 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113154.460:160): user pid=26343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113154.461:161): user pid=26343 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding home directory acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.147:162): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting user entries acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.148:163): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting mail file acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.148:164): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.148:165): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.157:166): user pid=31527 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='userdel: op=deleting home directory acct=mockbuild res=failed'
>type=USER_CHAUTHTOK msg=audit(1201113358.171:167): user pid=31529 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupdel: op=deleting group acct=mockbuild res=failed'
>type=USER_CHAUTHTOK msg=audit(1201113358.186:168): user pid=31531 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='groupadd: op=adding group acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.207:169): user pid=31533 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding user acct=mockbuild res=success'
>type=USER_CHAUTHTOK msg=audit(1201113358.208:170): user pid=31533 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='useradd: op=adding home directory acct=mockbuild res=success'
>type=USER_AUTH msg=audit(1201113491.279:171): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201113491.283:172): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201113491.330:173): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201113491.349:174): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1201113491.404:175): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1201113998.634:176): avc:  denied  { getattr } for  pid=5354 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201113998.634:176): arch=c000003e syscall=6 success=yes exit=0 a0=7fff1643d590 a1=7fff16429500 a2=7fff16429500 a3=7fff1643d59d items=0 ppid=1 pid=5354 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201113998.634:177): avc:  denied  { search } for  pid=5354 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201113998.634:177): arch=c000003e syscall=6 success=yes exit=0 a0=7fff1643d590 a1=7fff16429500 a2=7fff16429500 a3=7fff1643d59d items=0 ppid=1 pid=5354 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201113998.852:178): avc:  denied  { search } for  pid=5368 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201113998.852:178): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fffad6e54a0 a2=7fffad6e54a0 a3=61931b items=0 ppid=5354 pid=5368 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_START msg=audit(1201113999.763:179): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201113999.763:180): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201114010.366:181): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201114010.367:182): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201114010.439:183): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201114010.439:184): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201114087.856:185): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=AVC msg=audit(1201114087.857:186): avc:  denied  { read write } for  pid=5483 comm="unix_update" name="3" dev=devpts ino=5 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201114087.857:186): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaab31a238 a1=7fff1599ec30 a2=2aaaab51bf50 a3=3688d529f0 items=0 ppid=5480 pid=5483 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts3 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1201114087.859:187): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1201114088.009:188): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1201114088.009:189): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1201114088.035:190): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1201114088.036:191): user pid=5480 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1201114088.207:192): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1201114088.210:193): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1201114088.227:194): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1201114088.227:195): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=AVC msg=audit(1201114339.127:196): avc:  denied  { transition } for  pid=5835 comm="yum" path="/sbin/ldconfig" dev=dm-0 ino=1666437 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201114339.127:196): arch=c000003e syscall=59 success=yes exit=0 a0=f3d871d a1=7fff87d21be0 a2=8ab3110 a3=3f51813bb2 items=0 ppid=5740 pid=5835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldconfig" exe="/sbin/ldconfig" subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1201114437.317:197): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201114437.317:198): user pid=5399 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201114450.520:199): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1201114450.563:200): user pid=5490 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=AVC msg=audit(1201114733.855:201): avc:  denied  { getattr } for  pid=10564 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201114733.855:201): arch=c000003e syscall=6 success=yes exit=0 a0=604423 a1=7ffff5210b70 a2=7ffff5210b70 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201114733.855:202): avc:  denied  { search } for  pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201114733.855:202): arch=c000003e syscall=80 success=yes exit=0 a0=604423 a1=7ffff5210870 a2=0 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201114733.855:203): avc:  denied  { read } for  pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201114733.855:203): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201114733.862:204): avc:  denied  { getattr } for  pid=10564 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201114733.862:204): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7ffff52109e0 a2=7ffff52109e0 a3=3688d529f0 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201114733.862:205): avc:  denied  { setattr } for  pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201114733.862:205): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7ffff5210a70 a2=3688d529d8 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201114733.862:206): avc:  denied  { rmdir } for  pid=10564 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201114733.862:206): arch=c000003e syscall=84 success=no exit=-39 a0=604423 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201114733.936:207): avc:  denied  { getattr } for  pid=10564 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1201114733.936:207): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7ffff52109e0 a2=7ffff52109e0 a3=3688b22902 items=0 ppid=10562 pid=10564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201114861.207:208): user pid=10721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201114861.208:209): user pid=10721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201114861.208:210): login pid=10721 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201114861.225:211): user pid=10721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201114861.277:212): user pid=10721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201114861.278:213): user pid=10721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201115080.899:214): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201115080.899:215): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201115082.130:216): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201115082.130:217): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201115082.131:218): user pid=2778 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201115082.132:219): user pid=2777 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201115082.133:220): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201115082.134:221): avc:  denied  { signal } for  pid=2776 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201115082.134:221): arch=c000003e syscall=62 success=yes exit=0 a0=b25 a1=f a2=b25 a3=0 items=0 ppid=1 pid=2776 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201115082.134:222): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1201115091.619:3963): auditd normal halt, sending auid=4294967295 pid=11339 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201115189.779:8611): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2065 res=success
>type=CONFIG_CHANGE msg=audit(1201115189.879:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201115189.879:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201115190.276:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201115190.276:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201115191.342:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201115191.342:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201115192.999:12): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201115192.999:13): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201115228.626:14): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201115228.644:15): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201115228.731:16): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201115228.839:17): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1201115261.887:18): avc:  denied  { execheap } for  pid=3203 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201115261.887:18): arch=c000003e syscall=10 success=yes exit=0 a0=efd000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3203 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201115379.055:19): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1201115379.056:20): avc:  denied  { read write } for  pid=3784 comm="unix_update" name="2" dev=devpts ino=4 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201115379.056:20): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaafb9b238 a1=7fff885a90b0 a2=2aaaafd9cf50 a3=3688d529f0 items=0 ppid=3780 pid=3784 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts2 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1201115379.059:21): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201115379.097:22): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1201115379.097:23): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1201115401.105:24): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201115401.106:25): user pid=3780 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1201115405.050:26): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1201115405.052:27): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201115405.069:28): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1201115405.069:29): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=MAC_CONFIG_CHANGE msg=audit(1201115597.725:30): bool=allow_execheap val=1 old_val=0 auid=4294967295
>type=SYSCALL msg=audit(1201115597.725:30): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fffa1d48fd0 a2=2 a3=2aaaab116082 items=0 ppid=4160 pid=4409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201115597.730:31): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1201115811.923:32): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201115811.926:33): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201115811.928:34): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201115811.928:35): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201115811.928:36): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201116553.048:37): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201116553.050:38): user pid=4146 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1201116560.155:39): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1201116560.156:40): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201116560.171:41): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201116884.387:42): user pid=5868 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201116936.135:43): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201116936.135:44): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201116936.788:45): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201116936.789:46): avc:  denied  { signal } for  pid=2785 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201116936.789:46): arch=c000003e syscall=62 success=yes exit=0 a0=b2e a1=f a2=b2e a3=0 items=0 ppid=1 pid=2785 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201116936.789:47): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1201116943.305:8612): auditd normal halt, sending auid=4294967295 pid=6678 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201189383.748:182): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2073 res=success
>type=CONFIG_CHANGE msg=audit(1201189383.848:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201189383.848:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201189384.361:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201189384.361:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201189385.369:8): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201189385.369:9): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201189387.175:10): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201189387.175:11): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201189403.389:12): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201189403.407:13): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201189403.460:14): avc:  denied  { create } for  pid=2770 comm="ssh-agent" name="agent.2770" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201189403.460:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffc9d31310 a2=6e a3=0 items=0 ppid=2661 pid=2770 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201189403.461:15): avc:  denied  { write } for  pid=2661 comm="login" name="agent.2770" dev=dm-0 ino=327845 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201189403.461:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff98f602e0 a2=6e a3=0 items=0 ppid=1 pid=2661 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201189403.461:16): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201189403.469:17): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201189403.482:18): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201189410.778:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201189410.781:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201189410.782:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201189410.783:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201189410.783:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201189410.784:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201189624.611:25): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201189624.612:26): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201189624.612:27): avc:  denied  { unlink } for  pid=2771 comm="ssh-agent" name="agent.2770" dev=dm-0 ino=327845 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201189624.612:27): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffc9d30b20 a2=7fffc9d309f0 a3=0 items=0 ppid=1 pid=2771 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201189628.896:28): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1201189628.926:29): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=ls: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201189635.181:30): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1201189635.181:31): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201189639.426:32): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201189639.429:33): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201189639.435:34): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201189639.436:35): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201189639.436:36): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201189646.505:37): avc:  denied  { search } for  pid=3355 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201189646.505:37): arch=c000003e syscall=21 success=yes exit=0 a0=7fff2b5a1fa8 a1=4 a2=0 a3=7fff2b5a1013 items=0 ppid=3354 pid=3355 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_AUTH msg=audit(1201189664.179:38): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201189664.182:39): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201189664.184:40): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201189664.184:41): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201189664.184:42): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201189784.440:43): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_LOGIN msg=audit(1201189784.440:44): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_AUTH msg=audit(1201189788.096:45): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201189788.099:46): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201189788.100:47): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201189788.100:48): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1201189788.101:49): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1201189800.662:50): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201189800.665:51): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201189800.665:52): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201189800.667:53): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201189800.667:54): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1201189800.667:55): user pid=4354 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201189967.793:56): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201189967.794:57): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201189967.794:58): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1201189967.795:59): user pid=4616 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=AVC msg=audit(1201190005.329:60): avc:  denied  { read write } for  pid=4710 comm="load_policy" name="tty3" dev=tmpfs ino=228 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201190005.329:60): arch=c000003e syscall=59 success=yes exit=0 a0=1bccf20 a1=21d0de0 a2=0 a3=2aaaaaaec210 items=0 ppid=4690 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201190005.782:61): user pid=2113 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201190005.470:62): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201190005.470:62): arch=c000003e syscall=1 success=yes exit=4055987 a0=4 a1=2aaaab87a000 a2=3de3b3 a3=0 items=0 ppid=4690 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=CRED_ACQ msg=audit(1201190042.700:63): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201190042.701:64): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201190042.701:65): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1201190042.701:66): user pid=4759 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201190461.590:67): user pid=5254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201190461.591:68): user pid=5254 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201190461.591:69): login pid=5254 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201190461.606:70): user pid=5254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201190461.735:71): user pid=5254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201190461.736:72): user pid=5254 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201190662.042:73): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201190662.045:74): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201190662.054:75): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201190662.054:76): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201190738.510:77): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201190738.511:78): user pid=5838 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201190760.265:79): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201190760.267:80): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201190760.268:81): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201190760.269:82): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201190760.269:83): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201190760.269:84): user pid=6363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201190823.230:85): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201190823.231:86): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201190823.231:87): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201190823.231:88): user pid=6490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201191361.597:89): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201191361.600:90): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201191361.600:91): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201191361.601:92): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201191361.601:93): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201191361.601:94): user pid=6987 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SOURCES" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201191645.720:95): user pid=7318 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201191645.721:96): user pid=7318 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201191645.721:97): user pid=7318 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201191653.076:98): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201191653.079:99): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201191653.079:100): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201191653.080:101): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201191653.080:102): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201191653.080:103): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201191653.087:104): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201191653.087:105): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201191653.202:106): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201191653.203:107): user pid=3127 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201191653.205:108): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201191653.206:109): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1201191653.207:110): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201191653.209:111): avc:  denied  { unlink } for  pid=3140 comm="ssh-agent" name="agent.3139" dev=dm-0 ino=327845 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201191653.209:111): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffb2d4b250 a2=7fffb2d4b120 a3=0 items=0 ppid=1 pid=3140 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201191653.210:112): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1201191660.587:183): auditd normal halt, sending auid=4294967295 pid=7733 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201195233.962:8649): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2105 res=success
>type=CONFIG_CHANGE msg=audit(1201195234.061:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201195234.061:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201195234.649:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201195234.649:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201195235.864:8): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201195235.864:9): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201195237.363:10): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201195237.363:11): user pid=2128 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201195264.474:12): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201195264.492:13): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201195264.579:14): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201195264.695:15): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1201195278.743:16): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1201195278.904:17): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201195282.710:18): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201195282.712:19): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201195282.714:20): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201195282.714:21): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201195282.714:22): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201195302.449:23): avc:  granted  { execheap } for  pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195302.449:23): arch=c000003e syscall=10 success=yes exit=0 a0=efa000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195307.053:24): avc:  granted  { execheap } for  pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195307.053:24): arch=c000003e syscall=10 success=yes exit=0 a0=1057000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195307.187:25): avc:  granted  { execheap } for  pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195307.187:25): arch=c000003e syscall=10 success=yes exit=0 a0=1038000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195307.733:26): avc:  granted  { execheap } for  pid=3272 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195307.733:26): arch=c000003e syscall=10 success=yes exit=0 a0=107f000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3272 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201195326.310:27): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201195326.313:28): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201195326.314:29): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201195326.315:30): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201195326.315:31): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201195326.316:32): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=AVC msg=audit(1201195367.736:33): avc:  granted  { execheap } for  pid=3940 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195367.736:33): arch=c000003e syscall=10 success=yes exit=0 a0=10a6000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3940 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195368.032:34): avc:  granted  { execheap } for  pid=3943 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195368.032:34): arch=c000003e syscall=10 success=yes exit=0 a0=10b4000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3943 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195368.036:35): avc:  granted  { execheap } for  pid=3951 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195368.036:35): arch=c000003e syscall=10 success=yes exit=0 a0=1096000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3951 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195368.037:36): avc:  granted  { execheap } for  pid=3950 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195368.037:36): arch=c000003e syscall=10 success=yes exit=0 a0=1091000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3950 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195368.301:37): avc:  granted  { execheap } for  pid=3946 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195368.301:37): arch=c000003e syscall=10 success=yes exit=0 a0=10d9000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3946 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195368.353:38): avc:  granted  { execheap } for  pid=3954 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195368.353:38): arch=c000003e syscall=10 success=yes exit=0 a0=ab3000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3954 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195368.632:39): avc:  granted  { execheap } for  pid=3390 comm="mono" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195368.632:39): arch=c000003e syscall=10 success=yes exit=0 a0=1083000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3390 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="mono" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201195374.135:40): avc:  granted  { execheap } for  pid=3390 comm="mono" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201195374.135:40): arch=c000003e syscall=10 success=yes exit=0 a0=1113000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3390 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="mono" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201195934.280:41): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201195934.283:42): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201195934.283:43): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201195934.284:44): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201195934.284:45): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201195934.285:46): user pid=4627 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201196169.421:47): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201196169.422:48): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201196169.422:49): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201196169.422:50): user pid=5024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201197661.828:51): user pid=7347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201197661.830:52): user pid=7347 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201197661.830:53): login pid=7347 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201197661.842:54): user pid=7347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201197661.983:55): user pid=7347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201197661.984:56): user pid=7347 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201200828.120:57): avc:  denied  { getattr } for  pid=10690 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201200828.120:57): arch=c000003e syscall=6 success=yes exit=0 a0=7fffadd0f340 a1=7fffadcfb2b0 a2=7fffadcfb2b0 a3=7fffadd0f34d items=0 ppid=10689 pid=10690 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201200828.120:58): avc:  denied  { search } for  pid=10690 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201200828.120:58): arch=c000003e syscall=6 success=yes exit=0 a0=7fffadd0f340 a1=7fffadcfb2b0 a2=7fffadcfb2b0 a3=7fffadd0f34d items=0 ppid=10689 pid=10690 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=USER_START msg=audit(1201200828.222:59): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201200828.222:60): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201200828.252:61): avc:  denied  { search } for  pid=10705 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201200828.252:61): arch=c000003e syscall=4 success=no exit=-2 a0=619310 a1=7fff0f6821f0 a2=7fff0f6821f0 a3=61931b items=0 ppid=10690 pid=10705 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=CRED_DISP msg=audit(1201200835.160:62): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201200835.161:63): user pid=10704 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201200835.194:64): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201200835.194:65): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201201080.857:66): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201201080.857:67): user pid=10733 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201201262.028:68): user pid=11512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201201262.030:69): user pid=11512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201201262.030:70): login pid=11512 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201201262.045:71): user pid=11512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201201262.123:72): user pid=11512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201201262.124:73): user pid=11512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201201293.987:74): avc:  denied  { getattr } for  pid=11562 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201201293.987:74): arch=c000003e syscall=6 success=yes exit=0 a0=60442b a1=7fff18fc6930 a2=7fff18fc6930 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201201293.987:75): avc:  denied  { search } for  pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201201293.987:75): arch=c000003e syscall=80 success=yes exit=0 a0=60442b a1=7fff18fc6630 a2=0 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201201293.987:76): avc:  denied  { read } for  pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201201293.987:76): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201201293.994:77): avc:  denied  { getattr } for  pid=11562 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163399 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201201293.994:77): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff18fc67a0 a2=7fff18fc67a0 a3=3688d529f0 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201201293.994:78): avc:  denied  { setattr } for  pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201201293.994:78): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff18fc6830 a2=3688d529d8 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201201293.994:79): avc:  denied  { rmdir } for  pid=11562 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201201293.994:79): arch=c000003e syscall=84 success=no exit=-39 a0=60442b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201201294.039:80): avc:  denied  { getattr } for  pid=11562 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1201201294.039:80): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff18fc67a0 a2=7fff18fc67a0 a3=3688b22902 items=0 ppid=11560 pid=11562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_AUTH msg=audit(1201201747.201:81): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201201747.204:82): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201201747.206:83): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201201747.206:84): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201201747.251:85): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201204714.364:86): user pid=29640 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201204725.081:87): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201204725.084:88): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201204725.100:89): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201204725.100:90): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201204748.570:91): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201204748.571:92): user pid=29660 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201204861.140:93): user pid=4232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201204861.142:94): user pid=4232 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201204861.142:95): login pid=4232 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201204861.163:96): user pid=4232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201204861.198:97): user pid=4232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201204861.199:98): user pid=4232 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201206035.578:99): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201206035.592:100): user pid=2893 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201206036.900:101): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201206036.901:102): user pid=2835 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201206036.904:103): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201206036.905:104): avc:  denied  { signal } for  pid=2836 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201206036.905:104): arch=c000003e syscall=62 success=yes exit=0 a0=b60 a1=f a2=b60 a3=0 items=0 ppid=1 pid=2836 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201206036.905:105): user pid=2836 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1201206048.977:8650): auditd normal halt, sending auid=4294967295 pid=21572 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201206355.583:5133): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2069 res=success
>type=CONFIG_CHANGE msg=audit(1201206355.682:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201206355.682:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201206356.204:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201206356.204:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201206357.253:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201206357.253:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201206359.051:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201206359.051:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201206376.036:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201206376.054:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201206376.106:14): avc:  denied  { create } for  pid=2767 comm="ssh-agent" name="agent.2767" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201206376.106:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff6c205c0 a2=6e a3=0 items=0 ppid=2657 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201206376.118:15): avc:  denied  { write } for  pid=2657 comm="login" name="agent.2767" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201206376.118:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff39cff260 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201206376.118:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201206376.124:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201206376.137:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201207411.279:19): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201207411.282:20): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201207411.284:21): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201207411.284:22): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201207411.284:23): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201208461.658:24): user pid=23893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201208461.660:25): user pid=23893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201208461.660:26): login pid=23893 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201208461.673:27): user pid=23893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201208461.795:28): user pid=23893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201208461.796:29): user pid=23893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201209193.565:30): user pid=6199 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201209376.363:31): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201209376.365:32): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201209376.365:33): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201209376.366:34): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201209376.366:35): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201209376.367:36): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/libtool/devel" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201209376.486:37): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201209376.486:38): user pid=20037 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201209376.553:39): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201209376.553:40): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201209376.554:41): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201209376.554:42): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201209376.556:43): avc:  denied  { unlink } for  pid=2768 comm="ssh-agent" name="agent.2767" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201209376.556:43): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff6c1fdd0 a2=7ffff6c1fca0 a3=0 items=0 ppid=1 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1201209383.036:5134): auditd normal halt, sending auid=4294967295 pid=20449 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201462218.740:4952): auditd start, ver=1.6.5 format=raw kernel=2.6.23.9-85.fc8 auid=4294967295 pid=2066 res=success
>type=CONFIG_CHANGE msg=audit(1201462218.840:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201462218.840:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201462219.386:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201462219.386:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201462220.327:8): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201462220.327:9): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201462221.951:10): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201462221.952:11): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201462240.989:12): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1201462241.003:13): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201462245.205:14): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201462245.224:15): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201462245.276:16): avc:  denied  { create } for  pid=2765 comm="ssh-agent" name="agent.2765" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201462245.276:16): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff45b14290 a2=6e a3=0 items=0 ppid=2654 pid=2765 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201462245.302:17): avc:  denied  { write } for  pid=2654 comm="login" name="agent.2765" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201462245.302:17): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fffdabb3f30 a2=6e a3=0 items=0 ppid=1 pid=2654 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201462245.302:18): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201462245.319:19): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201462245.332:20): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201462257.735:21): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201462257.737:22): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201462257.738:23): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201462257.740:24): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201462257.740:25): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201462257.741:26): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201462433.165:27): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201462433.168:28): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201462433.169:29): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201462433.170:30): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201462433.170:31): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201462522.904:32): avc:  denied  { read write } for  pid=3297 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462522.904:32): arch=c000003e syscall=59 success=yes exit=0 a0=8c9b00 a1=8c8280 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3296 pid=3297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201462522.945:33): user pid=3297 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1201462522.970:34): avc:  denied  { read write } for  pid=3298 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462522.970:34): arch=c000003e syscall=59 success=yes exit=0 a0=8ca800 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3296 pid=3298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201462523.003:35): user pid=3298 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201462523.006:36): user pid=3299 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201462523.008:37): user pid=3300 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1201462561.339:38): avc:  denied  { read write } for  pid=3338 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462561.339:38): arch=c000003e syscall=59 success=yes exit=0 a0=8cb3c0 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=3335 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201462561.341:39): avc:  denied  { ioctl } for  pid=3338 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462561.341:39): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffcc3d3530 a3=2aaaaf54e412 items=0 ppid=3335 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201462561.341:40): avc:  denied  { getattr } for  pid=3338 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462561.341:40): arch=c000003e syscall=6 success=yes exit=0 a0=7fffcc3d7bd0 a1=7fffcc3d3740 a2=7fffcc3d3740 a3=2aaaaf54e412 items=0 ppid=3335 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201462561.341:41): user pid=3338 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=beaglidx exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1201462561.344:42): avc:  denied  { ioctl } for  pid=3339 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462561.344:42): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffa2296350 a3=2aaaaf5cfd32 items=0 ppid=3335 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201462561.344:43): avc:  denied  { getattr } for  pid=3339 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201462561.344:43): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa229a9f0 a1=7fffa2296560 a2=7fffa2296560 a3=2aaaaf5cfd32 items=0 ppid=3335 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201462561.344:44): user pid=3339 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=beaglidx exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201462601.189:45): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201462601.192:46): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201462601.193:47): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201462601.193:48): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1201462601.583:49): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1201462767.976:50): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201462767.979:51): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201462768.060:52): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201462768.060:53): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201462900.886:54): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201462900.889:55): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201462900.889:56): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201462900.890:57): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201462900.890:58): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201462900.890:59): user pid=23288 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201462934.090:60): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201462934.091:61): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201462934.091:62): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201462934.091:63): user pid=23366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=AVC msg=audit(1201463098.490:64): avc:  denied  { search } for  pid=25832 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201463098.490:64): arch=c000003e syscall=21 success=yes exit=0 a0=7fffa8ef5fa8 a1=4 a2=0 a3=7fffa8ef4973 items=0 ppid=25831 pid=25832 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=CRED_DISP msg=audit(1201463814.251:65): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201463814.252:66): user pid=22830 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201464061.774:67): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201464061.775:68): user pid=6738 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201464061.776:69): login pid=6738 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201464061.789:70): user pid=6738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201464061.904:71): user pid=6738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201464061.905:72): user pid=6738 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201465646.485:73): user pid=8240 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201465646.485:74): user pid=8240 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201465646.485:75): user pid=8240 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201465653.002:76): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201465653.005:77): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201465653.005:78): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201465653.007:79): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201465653.007:80): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201465653.007:81): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201465653.014:82): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201465653.014:83): user pid=8241 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201465653.094:84): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201465653.094:85): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201465653.095:86): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201465653.095:87): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1201465653.096:88): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201465653.097:89): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201465653.098:90): avc:  denied  { unlink } for  pid=2766 comm="ssh-agent" name="agent.2765" dev=dm-0 ino=784858 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201465653.098:90): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff45b13aa0 a2=7fff45b13970 a3=0 items=0 ppid=1 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1201465659.616:4953): auditd normal halt, sending auid=4294967295 pid=8654 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201542644.234:1046): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2068 res=success
>type=CONFIG_CHANGE msg=audit(1201542644.334:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201542644.334:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201542644.897:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201542644.897:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201542645.979:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201542645.979:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201542647.785:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201542647.786:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201542663.775:12): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201542663.793:13): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201542663.845:14): avc:  denied  { create } for  pid=2648 comm="ssh-agent" name="agent.2648" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201542663.845:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffbc0fafe0 a2=6e a3=0 items=0 ppid=2608 pid=2648 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201542663.860:15): avc:  denied  { write } for  pid=2608 comm="login" name="agent.2648" dev=dm-0 ino=1340668 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201542663.860:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff1d4fc880 a2=6e a3=0 items=0 ppid=1 pid=2608 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201542663.861:16): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201542663.872:17): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201542663.885:18): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201542683.056:19): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201542683.058:20): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201542683.115:21): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201542683.115:22): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201542757.655:23): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1201542757.674:24): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=s4504kw: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1201542761.664:25): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201542761.667:26): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201542761.669:27): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201542761.669:28): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201542761.669:29): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201542774.112:30): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201542774.115:31): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201542774.115:32): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201542774.116:33): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201542774.116:34): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201542774.117:35): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/emacs" (terminal=tty2 res=success)'
>type=AVC msg=audit(1201543046.119:36): avc:  denied  { read write } for  pid=4660 comm="userdel" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201543046.119:36): arch=c000003e syscall=59 success=yes exit=0 a0=8cad80 a1=8c9690 a2=8c8d70 a3=65 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201543046.148:37): avc:  denied  { search } for  pid=4660 comm="userdel" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=AVC msg=audit(1201543046.148:37): avc:  denied  { read } for  pid=4660 comm="userdel" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1201543046.148:37): arch=c000003e syscall=2 success=no exit=-2 a0=7fffa8a61cd0 a1=0 a2=2aaaaaaab000 a3=0 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201543046.164:38): avc:  denied  { ioctl } for  pid=4660 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201543046.164:38): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffa8a5dc80 a3=3688d529f0 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201543046.164:39): avc:  denied  { getattr } for  pid=4660 comm="userdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201543046.164:39): arch=c000003e syscall=6 success=yes exit=0 a0=7fffa8a62320 a1=7fffa8a5de90 a2=7fffa8a5de90 a3=3688d529f0 items=0 ppid=4659 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="userdel" exe="/usr/sbin/userdel" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201543046.164:40): user pid=4660 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201543046.177:41): user pid=4660 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_ROLE_CHANGE msg=audit(1201543047.786:42): user pid=4663 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1201543047.878:43): avc:  denied  { read write } for  pid=4666 comm="groupdel" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201543047.878:43): arch=c000003e syscall=59 success=yes exit=0 a0=8cb090 a1=8cb020 a2=8cb0b0 a3=65 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201543047.924:44): avc:  denied  { search } for  pid=4666 comm="groupdel" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=AVC msg=audit(1201543047.924:44): avc:  denied  { search } for  pid=4666 comm="groupdel" name="db2inst" dev=dm-1 ino=4259844 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0 tclass=dir
>type=AVC msg=audit(1201543047.924:44): avc:  denied  { search } for  pid=4666 comm="groupdel" name="sqllib" dev=dm-1 ino=4259854 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=dir
>type=AVC msg=audit(1201543047.924:44): avc:  denied  { read } for  pid=4666 comm="groupdel" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1201543047.924:44): arch=c000003e syscall=2 success=no exit=-2 a0=7fff23aea540 a1=0 a2=2aaaaaaab000 a3=0 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201543047.943:45): avc:  denied  { ioctl } for  pid=4666 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201543047.943:45): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff23ae6950 a3=2aaaaf5513f2 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201543047.943:46): avc:  denied  { getattr } for  pid=4666 comm="groupdel" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201543047.943:46): arch=c000003e syscall=6 success=yes exit=0 a0=7fff23aeaff0 a1=7fff23ae6b60 a2=7fff23ae6b60 a3=2aaaaf5513f2 items=0 ppid=4659 pid=4666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupdel" exe="/usr/sbin/groupdel" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1201543047.943:47): user pid=4666 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201543047.948:48): user pid=4667 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201543047.988:49): user pid=4671 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201543261.054:50): user pid=4916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201543261.056:51): user pid=4916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201543261.056:52): login pid=4916 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201543261.062:53): user pid=4916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201543261.183:54): user pid=4916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201543261.194:55): user pid=4916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201543411.210:56): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201543411.212:57): user pid=2777 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201543524.017:58): avc:  denied  { search } for  pid=5188 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201543524.017:58): arch=c000003e syscall=21 success=yes exit=0 a0=7fff625f1fa8 a1=4 a2=0 a3=7fff625f0073 items=0 ppid=5187 pid=5188 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_AUTH msg=audit(1201545040.371:59): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201545040.373:60): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201545040.380:61): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201545040.380:62): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201545070.248:63): user pid=7453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201545070.248:64): user pid=7453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201545070.295:65): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201545070.295:66): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201545070.296:67): user pid=2608 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201545070.296:68): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201545070.298:69): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201545070.314:70): user pid=7077 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201545070.315:71): avc:  denied  { unlink } for  pid=2649 comm="ssh-agent" name="agent.2648" dev=dm-0 ino=1340668 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201545070.315:71): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffbc0fa7f0 a2=7fffbc0fa6c0 a3=0 items=0 ppid=1 pid=2649 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1201545077.917:1047): auditd normal halt, sending auid=4294967295 pid=7858 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201548981.260:9327): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2069 res=success
>type=CONFIG_CHANGE msg=audit(1201548981.360:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201548981.360:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201548981.898:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201548981.898:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201548982.955:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201548982.955:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201548984.554:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201548984.554:12): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201549018.515:13): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201549018.533:14): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201549018.611:15): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201549018.736:16): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1201549021.693:17): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3082 comm="pulseaudio" sig=6
>type=USER_AUTH msg=audit(1201549049.247:18): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201549049.250:19): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201549049.255:20): avc:  denied  { create } for  pid=3233 comm="ssh-agent" name="agent.3233" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201549049.255:20): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=7fff49bb58a0 a2=6e a3=0 items=0 ppid=2792 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1201549049.256:21): login pid=2792 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1201549049.267:22): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201549049.271:23): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201549049.271:24): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201549049.271:25): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201549051.694:26): avc:  granted  { execheap } for  pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549051.694:26): arch=c000003e syscall=10 success=yes exit=0 a0=f01000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549173.882:27): avc:  granted  { execheap } for  pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549173.882:27): arch=c000003e syscall=10 success=yes exit=0 a0=103f000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549173.966:28): avc:  granted  { execheap } for  pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549173.966:28): arch=c000003e syscall=10 success=yes exit=0 a0=1053000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549174.281:29): avc:  granted  { execheap } for  pid=3200 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549174.281:29): arch=c000003e syscall=10 success=yes exit=0 a0=10a3000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3200 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549234.284:30): avc:  granted  { execheap } for  pid=3927 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549234.284:30): arch=c000003e syscall=10 success=yes exit=0 a0=10bc000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3927 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549234.503:31): avc:  granted  { execheap } for  pid=3930 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549234.503:31): arch=c000003e syscall=10 success=yes exit=0 a0=10d0000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3930 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549234.503:32): avc:  granted  { execheap } for  pid=3931 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549234.503:32): arch=c000003e syscall=10 success=yes exit=0 a0=10c7000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3931 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549234.538:33): avc:  granted  { execheap } for  pid=3938 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549234.538:33): arch=c000003e syscall=10 success=yes exit=0 a0=10cd000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3938 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201549234.541:34): avc:  granted  { execheap } for  pid=3940 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201549234.541:34): arch=c000003e syscall=10 success=yes exit=0 a0=110e000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3940 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1201549767.889:35): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201549767.892:36): user pid=2792 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201549772.212:37): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201549772.215:38): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201549772.216:39): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201549772.217:40): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201549772.217:41): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201550461.889:42): user pid=18957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201550461.890:43): user pid=18957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201550461.890:44): login pid=18957 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201550461.910:45): user pid=18957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201550462.058:46): user pid=18957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201550462.059:47): user pid=18957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201550636.106:48): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201550636.106:49): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201550636.725:50): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201550636.726:51): avc:  denied  { signal } for  pid=4450 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201550636.726:51): arch=c000003e syscall=62 success=no exit=-13 a0=b32 a1=f a2=b32 a3=0 items=0 ppid=1 pid=4450 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201550636.727:52): user pid=4450 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=DAEMON_END msg=audit(1201550643.453:9328): auditd normal halt, sending auid=4294967295 pid=19576 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201623501.340:3939): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2063 res=success
>type=CONFIG_CHANGE msg=audit(1201623501.439:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201623501.439:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201623501.977:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201623501.977:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201623503.134:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201623503.134:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201623504.733:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201623504.733:12): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201623737.027:13): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1201623737.038:14): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201623742.287:15): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1201623742.287:16): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201623745.562:17): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201623745.580:18): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201623745.632:19): avc:  denied  { create } for  pid=3010 comm="ssh-agent" name="agent.3010" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201623745.632:19): arch=c000003e syscall=49 success=no exit=-13 a0=3 a1=7fffb72ca720 a2=6e a3=0 items=0 ppid=2786 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1201623745.633:20): login pid=2786 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1201623745.644:21): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201623745.649:22): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201623745.658:23): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201623745.659:24): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201623771.152:25): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201623771.203:26): user pid=2786 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1201623777.709:3940): auditd normal halt, sending auid=4294967295 pid=3575 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201625390.505:1763): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2072 res=success
>type=CONFIG_CHANGE msg=audit(1201625390.604:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201625390.604:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201625390.894:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201625390.894:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201625391.710:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201625391.711:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201625393.981:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201625393.981:12): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201625536.136:13): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201625536.154:14): user pid=2655 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201625536.206:15): avc:  denied  { create } for  pid=2860 comm="ssh-agent" name="agent.2860" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201625536.206:15): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=7fff603d6a00 a2=6e a3=0 items=0 ppid=2655 pid=2860 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1201625536.208:16): login pid=2655 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1201625536.245:17): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201625536.250:18): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201625536.257:19): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201625536.270:20): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201625547.627:21): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201625547.629:22): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201625547.630:23): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201625547.631:24): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201625547.631:25): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201625547.632:26): user pid=2998 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=AVC msg=audit(1201625755.021:27): avc:  denied  { search } for  pid=3275 comm="ck-get-x11-serv" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:consolekit_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201625755.021:27): arch=c000003e syscall=21 success=no exit=-13 a0=7fffa8100fa8 a1=4 a2=0 a3=7fffa80feb73 items=0 ppid=3274 pid=3275 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="ck-get-x11-serv" exe="/usr/libexec/ck-get-x11-server-pid" subj=system_u:system_r:consolekit_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201626061.360:28): user pid=4280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201626061.361:29): user pid=4280 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201626061.361:30): login pid=4280 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201626061.387:31): user pid=4280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201626061.531:32): user pid=4280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201626061.532:33): user pid=4280 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201626078.759:34): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201626078.759:35): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201626078.799:36): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201626091.109:37): user pid=4310 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201627074.118:38): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201627074.121:39): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1201627074.123:40): login pid=2656 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1201627074.136:41): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201627074.139:42): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201627074.140:43): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201627074.140:44): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201627349.556:45): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201627349.559:46): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=LOGIN msg=audit(1201627349.561:47): login pid=2657 uid=0 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1201627349.574:48): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201627349.577:49): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201627349.577:50): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1201627349.578:51): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627469.333:52): user pid=7148 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627469.341:53): user pid=7152 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627478.717:54): user pid=7245 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627478.723:55): user pid=7249 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627479.395:56): user pid=7260 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627480.316:57): user pid=7303 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201627480.327:58): user pid=7305 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201627480.339:59): user pid=7307 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627480.357:60): user pid=7312 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201627480.362:61): user pid=7312 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201627560.358:62): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201627560.361:63): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201627560.362:64): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201627560.363:65): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201627560.363:66): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1201627560.364:67): user pid=7444 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201627569.237:68): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201627569.238:69): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201627569.238:70): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1201627569.238:71): user pid=7511 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1201627625.263:72): user pid=7626 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1201627629.632:73): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201627629.634:74): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201627629.640:75): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201627629.640:76): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201627793.647:77): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201627793.648:78): user pid=7630 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201627905.384:79): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201627905.386:80): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201627905.394:81): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201627905.394:82): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CHAUTHTOK msg=audit(1201628162.289:83): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user entries acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201628162.290:84): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201628162.290:85): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201628162.291:86): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201628162.294:87): user pid=9460 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201628162.307:88): user pid=9466 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1201628162.322:89): user pid=9468 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201628162.342:90): user pid=9473 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1201628162.347:91): user pid=9473 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201629661.566:92): user pid=11396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201629661.567:93): user pid=11396 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201629661.567:94): login pid=11396 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201629661.582:95): user pid=11396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201629661.619:96): user pid=11396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201629661.621:97): user pid=11396 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1201630980.400:98): avc:  denied  { getattr } for  pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.400:98): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=12977 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.400:99): avc:  denied  { search } for  pid=12978 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.400:99): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d2b items=0 ppid=12977 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.400:100): avc:  denied  { getattr } for  pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.400:100): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=12977 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.402:101): avc:  denied  { getattr } for  pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.402:101): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=1 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.402:102): avc:  denied  { search } for  pid=12978 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.402:102): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d26 items=0 ppid=1 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.402:103): avc:  denied  { getattr } for  pid=12978 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.402:103): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=1 pid=12978 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.450:104): avc:  denied  { search } for  pid=12981 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.450:104): arch=c000003e syscall=4 success=no exit=-13 a0=619310 a1=7fff10cbf820 a2=7fff10cbf820 a3=61931b items=0 ppid=12978 pid=12981 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1201630980.450:105): avc:  denied  { search } for  pid=12981 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201630980.450:105): arch=c000003e syscall=2 success=no exit=-13 a0=619310 a1=0 a2=0 a3=61931b items=0 ppid=12978 pid=12981 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_START msg=audit(1201630980.733:106): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201630980.733:107): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201630997.319:108): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201630997.319:109): user pid=12993 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201630997.351:110): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201630997.351:111): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201630998.417:112): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201630998.418:113): user pid=8395 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1201631267.016:114): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201631267.016:115): user pid=13051 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1201631598.499:116): avc:  denied  { getattr } for  pid=15481 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631598.499:116): arch=c000003e syscall=6 success=no exit=-13 a0=60446b a1=7fff31b704d0 a2=7fff31b704d0 a3=3688b22902 items=0 ppid=15479 pid=15481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201631598.567:117): avc:  denied  { getattr } for  pid=15481 comm="tmpwatch" path="/tmp/pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631598.567:117): arch=c000003e syscall=6 success=no exit=-13 a0=6045db a1=7fff31b704d0 a2=7fff31b704d0 a3=3688b22902 items=0 ppid=15479 pid=15481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1201631599.238:118): avc:  denied  { getattr } for  pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.238:118): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.238:119): avc:  denied  { search } for  pid=15523 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.238:119): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d2b items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.239:120): avc:  denied  { getattr } for  pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.239:120): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.239:121): avc:  denied  { getattr } for  pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.239:121): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbcd10 a1=7fffc7ba8c80 a2=7fffc7ba8c80 a3=7fffc7bbcd1d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.239:122): avc:  denied  { search } for  pid=15523 comm="sendmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.239:122): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bd0d10 a1=7fffc7bd1de0 a2=7fffc7bd1de0 a3=7fffc7bd0d26 items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.239:123): avc:  denied  { getattr } for  pid=15523 comm="sendmail" path="/home" dev=dm-1 ino=2 scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.239:123): arch=c000003e syscall=6 success=no exit=-13 a0=7fffc7bbbb50 a1=7fffc7ba7ac0 a2=7fffc7ba7ac0 a3=7fffc7bbbb5d items=0 ppid=1 pid=15523 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.277:124): avc:  denied  { search } for  pid=15524 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.277:124): arch=c000003e syscall=4 success=no exit=-13 a0=619310 a1=7fff766be220 a2=7fff766be220 a3=61931b items=0 ppid=15523 pid=15524 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=AVC msg=audit(1201631599.277:125): avc:  denied  { search } for  pid=15524 comm="procmail" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:procmail_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=SYSCALL msg=audit(1201631599.277:125): arch=c000003e syscall=2 success=no exit=-13 a0=619310 a1=0 a2=0 a3=61931b items=0 ppid=15523 pid=15524 auid=4294967295 uid=0 gid=12 euid=0 suid=0 fsuid=0 egid=12 sgid=12 fsgid=12 tty=(none) comm="procmail" exe="/usr/bin/procmail" subj=system_u:system_r:procmail_t:s0 key=(null)
>type=USER_ACCT msg=audit(1201633261.148:126): user pid=16898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201633261.149:127): user pid=16898 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201633261.149:128): login pid=16898 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201633261.187:129): user pid=16898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201633261.273:130): user pid=16898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201633261.274:131): user pid=16898 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1201636861.299:132): user pid=22619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201636861.300:133): user pid=22619 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201636861.300:134): login pid=22619 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201636861.313:135): user pid=22619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201636861.335:136): user pid=22619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201636861.336:137): user pid=22619 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201637368.485:138): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201637368.488:139): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201637368.519:140): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201637368.532:141): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1201637425.413:142): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201637425.413:143): user pid=23336 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201640461.349:144): user pid=3823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201640461.351:145): user pid=3823 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201640461.351:146): login pid=3823 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201640461.366:147): user pid=3823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201640461.398:148): user pid=3823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201640461.399:149): user pid=3823 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201641080.829:150): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1201641080.831:151): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1201641080.839:152): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1201641080.839:153): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1201642068.479:154): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201642068.482:155): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201642068.488:156): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201642068.488:157): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201642097.756:158): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201642097.757:159): user pid=8755 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201642258.662:160): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201642258.664:161): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201642258.671:162): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201642258.671:163): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201642388.455:164): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201642388.456:165): user pid=11488 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201643095.374:166): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201643095.377:167): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201643095.382:168): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201643095.382:169): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201643260.743:170): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201643260.744:171): user pid=12797 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201643680.301:172): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201643680.301:173): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201643680.348:174): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AVC msg=audit(1201643953.746:175): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201643953.037:176): policy loaded auid=500
>type=SYSCALL msg=audit(1201643953.037:176): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16075 pid=16099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201644013.309:177): user pid=16256 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1201644021.861:178): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201644021.323:179): policy loaded auid=500
>type=SYSCALL msg=audit(1201644021.323:179): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16257 pid=16264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201644022.283:180): user pid=16257 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1201644032.659:181): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201644031.906:182): policy loaded auid=500
>type=SYSCALL msg=audit(1201644031.906:182): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16267 pid=16277 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201644033.094:183): user pid=16267 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ROLE_CHANGE msg=audit(1201644034.354:184): user pid=16280 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1201644043.582:185): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201644042.825:186): policy loaded auid=500
>type=SYSCALL msg=audit(1201644042.825:186): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16281 pid=16305 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201644044.006:187): user pid=16281 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AVC msg=audit(1201644054.358:188): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201644053.633:189): policy loaded auid=500
>type=SYSCALL msg=audit(1201644053.633:189): arch=c000003e syscall=1 success=yes exit=4091022 a0=4 a1=2aaaab87a000 a2=3e6c8e a3=0 items=0 ppid=16307 pid=16316 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1201644054.818:190): user pid=16307 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1201644061.569:191): user pid=16326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201644061.571:192): user pid=16326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201644061.571:193): login pid=16326 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201644061.660:194): user pid=16326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201644061.837:195): user pid=16326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201644061.838:196): user pid=16326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201644205.088:197): user pid=15664 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201644250.082:198): user pid=16689 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201644250.082:199): user pid=16689 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201644250.987:200): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201644250.987:201): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1201644250.987:202): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201644251.075:203): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201644251.075:204): user pid=4526 uid=500 auid=500 subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201644251.090:205): user pid=2655 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201644251.091:206): user pid=2657 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1201644251.188:207): user pid=2656 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1201644260.027:1764): auditd normal halt, sending auid=4294967295 pid=17100 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201712017.489:2442): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2065 res=success
>type=CONFIG_CHANGE msg=audit(1201712017.588:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201712017.588:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201712017.928:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201712017.928:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201712018.769:8): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201712018.769:9): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201712020.766:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201712020.766:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201712049.328:12): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201712049.354:13): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201712049.997:14): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201712050.116:15): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1201712084.367:16): avc:  granted  { execheap } for  pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712084.367:16): arch=c000003e syscall=10 success=yes exit=0 a0=f0a000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201712125.048:17): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201712125.051:18): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201712125.052:19): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201712125.052:20): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201712125.052:21): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201712198.235:22): avc:  granted  { execheap } for  pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712198.235:22): arch=c000003e syscall=10 success=yes exit=0 a0=1055000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712198.327:23): avc:  granted  { execheap } for  pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712198.327:23): arch=c000003e syscall=10 success=yes exit=0 a0=100f000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712198.625:24): avc:  granted  { execheap } for  pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712198.625:24): arch=c000003e syscall=10 success=yes exit=0 a0=10a0000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712198.626:25): avc:  granted  { execheap } for  pid=3202 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712198.626:25): arch=c000003e syscall=10 success=yes exit=0 a0=1096000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3202 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712258.627:26): avc:  granted  { execheap } for  pid=4084 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712258.627:26): arch=c000003e syscall=10 success=yes exit=0 a0=10aa000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4084 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712258.944:27): avc:  granted  { execheap } for  pid=4088 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712258.944:27): arch=c000003e syscall=10 success=yes exit=0 a0=10b5000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4088 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712258.946:28): avc:  granted  { execheap } for  pid=4089 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712258.946:28): arch=c000003e syscall=10 success=yes exit=0 a0=10a3000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4089 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712258.947:29): avc:  granted  { execheap } for  pid=4087 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712258.947:29): arch=c000003e syscall=10 success=yes exit=0 a0=10ab000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4087 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712258.951:30): avc:  granted  { execheap } for  pid=4094 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712258.951:30): arch=c000003e syscall=10 success=yes exit=0 a0=10fd000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=4094 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712258.953:31): avc:  granted  { execheap } for  pid=4095 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712258.953:31): arch=c000003e syscall=10 success=yes exit=0 a0=10ea000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=4095 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201712259.098:32): avc:  granted  { execheap } for  pid=4090 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201712259.098:32): arch=c000003e syscall=10 success=yes exit=0 a0=10c0000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=4090 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1201712461.239:33): user pid=5800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201712461.240:34): user pid=5800 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201712461.240:35): login pid=5800 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201712461.265:36): user pid=5800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201712461.384:37): user pid=5800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201712461.385:38): user pid=5800 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201713425.990:39): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201713425.993:40): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201713425.994:41): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201713425.995:42): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201713425.995:43): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201713425.996:44): user pid=12146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/selinux-policy/F-8/noarch" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201713488.230:45): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201713488.231:46): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201713488.231:47): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201713488.231:48): user pid=12194 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/selinux-policy/F-8/noarch" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=AVC msg=audit(1201713561.487:49): avc:  denied  { read write } for  pid=12272 comm="load_policy" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201713561.487:49): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfb0 a1=2aaab2a3d100 a2=0 a3=0 items=0 ppid=12251 pid=12272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201713562.058:50): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201713561.641:51): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201713561.641:51): arch=c000003e syscall=1 success=yes exit=4091106 a0=4 a1=2aaaab87a000 a2=3e6ce2 a3=0 items=0 ppid=12251 pid=12272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1201713571.909:52): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201713571.912:53): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201713571.935:54): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201713571.935:55): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201713624.333:56): avc:  denied  { search } for  pid=12503 comm="setsebool" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=AVC msg=audit(1201713624.333:56): avc:  denied  { search } for  pid=12503 comm="setsebool" name="db2inst" dev=dm-1 ino=4259844 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0 tclass=dir
>type=AVC msg=audit(1201713624.333:56): avc:  denied  { search } for  pid=12503 comm="setsebool" name="sqllib" dev=dm-1 ino=4259854 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=dir
>type=AVC msg=audit(1201713624.333:56): avc:  denied  { read } for  pid=12503 comm="setsebool" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1201713624.333:56): arch=c000003e syscall=2 success=no exit=-2 a0=7fff138822e0 a1=0 a2=2aaaaacca000 a3=0 items=0 ppid=12327 pid=12503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null)
>type=MAC_CONFIG_CHANGE msg=audit(1201713632.099:57): bool=allow_execheap val=0 old_val=1 auid=4294967295
>type=SYSCALL msg=audit(1201713632.099:57): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7fff1387bb00 a2=2 a3=2aaaab116082 items=0 ppid=12327 pid=12503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201713632.103:58): avc:  denied  { search } for  pid=12503 comm="setsebool" name="/" dev=dm-1 ino=2 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>type=AVC msg=audit(1201713632.103:58): avc:  denied  { search } for  pid=12503 comm="setsebool" name="db2inst" dev=dm-1 ino=4259844 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_dir_t:s0 tclass=dir
>type=AVC msg=audit(1201713632.103:58): avc:  denied  { search } for  pid=12503 comm="setsebool" name="sqllib" dev=dm-1 ino=4259854 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=dir
>type=AVC msg=audit(1201713632.103:58): avc:  denied  { read } for  pid=12503 comm="setsebool" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setsebool_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1201713632.103:58): arch=c000003e syscall=2 success=no exit=-2 a0=7fff13881ee0 a1=0 a2=2aaaaacca000 a3=0 items=0 ppid=12327 pid=12503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201713632.104:59): user pid=2105 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_END msg=audit(1201713686.527:60): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201713686.527:61): user pid=2838 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201713687.174:62): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201713687.175:63): avc:  denied  { signal } for  pid=2781 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201713687.175:63): arch=c000003e syscall=62 success=yes exit=0 a0=b29 a1=f a2=b29 a3=0 items=0 ppid=1 pid=2781 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201713687.175:64): user pid=2781 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201713687.234:65): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201713687.236:66): user pid=12320 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1201713694.736:2443): auditd normal halt, sending auid=4294967295 pid=13016 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201713776.509:2187): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2067 res=success
>type=CONFIG_CHANGE msg=audit(1201713776.608:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201713776.608:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201713777.114:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201713777.114:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201713778.253:8): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201713778.253:9): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201713780.060:10): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201713780.060:11): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201713824.220:12): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201713824.238:13): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201713824.333:14): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201713824.439:15): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1201713992.996:16): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201713992.999:17): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201713993.001:18): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201713993.001:19): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201713993.001:20): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201713999.610:21): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201713999.612:22): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201713999.636:23): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201713999.636:24): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201714057.825:25): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201714057.826:26): user pid=3939 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201714062.441:27): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201714062.443:28): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201714062.470:29): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201714062.471:30): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201714128.148:31): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1201714128.149:32): avc:  denied  { read write } for  pid=4889 comm="unix_update" name="2" dev=devpts ino=4 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201714128.149:32): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaafba3238 a1=7fffc0143c20 a2=2aaaafda4f50 a3=3688d529f0 items=0 ppid=4885 pid=4889 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts2 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1201714128.151:33): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201714128.153:34): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1201714128.153:35): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1201714132.798:36): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201714132.799:37): user pid=4885 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1201714136.113:38): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1201714136.116:39): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201714136.157:40): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1201714136.157:41): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1201715463.803:42): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201715463.804:43): user pid=5237 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1201715470.294:44): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1201715470.295:45): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201715470.312:46): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201715484.456:47): user pid=6720 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201715674.454:48): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1201715674.456:49): avc:  denied  { read write } for  pid=6898 comm="unix_update" name="2" dev=devpts ino=4 scontext=system_u:system_r:updpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201715674.456:49): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaafba3238 a1=7fff4dbbc680 a2=2aaaafda4f50 a3=3688d529f0 items=0 ppid=6893 pid=6898 auid=4294967295 uid=0 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=pts2 comm="unix_update" exe="/sbin/unix_update" subj=system_u:system_r:updpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1201715674.458:50): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1201715674.475:51): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1201715674.475:52): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1201715887.182:53): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201715887.183:54): user pid=4346 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201716061.348:55): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201716061.349:56): user pid=7404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201716061.349:57): login pid=7404 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201716061.362:58): user pid=7404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201716061.477:59): user pid=7404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201716061.478:60): user pid=7404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201716086.249:61): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201716086.252:62): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201716086.266:63): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201716086.266:64): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201716097.452:65): avc:  denied  { read } for  pid=7587 comm="restorecon" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1201716097.452:65): arch=c000003e syscall=2 success=no exit=-2 a0=7ffffb7a8070 a1=0 a2=2aaaaaccc000 a3=0 items=0 ppid=7450 pid=7587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1201716119.007:66): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201716119.008:67): user pid=7444 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201716630.617:68): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201716630.620:69): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201716630.622:70): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201716630.622:71): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201716630.622:72): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201717387.479:73): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201717387.481:74): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201717387.487:75): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201717387.488:76): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201717479.227:77): avc:  denied  { read write } for  pid=18272 comm="load_policy" name="tty1" dev=tmpfs ino=2602 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1201717479.227:77): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfb0 a1=2aaab2a047e0 a2=0 a3=0 items=0 ppid=18245 pid=18272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1201717479.793:78): user pid=2107 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1201717479.372:79): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1201717479.372:79): arch=c000003e syscall=1 success=yes exit=4091130 a0=4 a1=2aaaab87a000 a2=3e6cfa a3=0 items=0 ppid=18245 pid=18272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201717480.337:80): avc:  denied  { read } for  pid=18304 comm="restorecon" name="lib64" dev=dm-1 ino=4259877 scontext=system_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unconfined_home_t:s0 tclass=lnk_file
>type=SYSCALL msg=audit(1201717480.337:80): arch=c000003e syscall=2 success=no exit=-2 a0=7fff09bd2520 a1=0 a2=2aaaaaccc000 a3=0 items=0 ppid=18276 pid=18304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1201717646.232:81): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201717646.233:82): user pid=17700 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201718580.604:83): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201718580.605:84): user pid=6893 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1201718598.530:85): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201718598.531:86): user pid=2843 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201718599.039:87): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201718599.040:88): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201718599.041:89): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1201718599.042:90): avc:  denied  { signal } for  pid=2791 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201718599.042:90): arch=c000003e syscall=62 success=yes exit=0 a0=b2d a1=f a2=b2d a3=0 items=0 ppid=1 pid=2791 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201718599.042:91): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1201718606.719:2188): auditd normal halt, sending auid=4294967295 pid=19785 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201718687.025:9230): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2068 res=success
>type=CONFIG_CHANGE msg=audit(1201718687.125:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201718687.125:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201718687.712:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201718687.713:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201718688.654:8): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1201718688.654:9): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1201718690.460:10): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1201718690.460:11): user pid=2091 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1201718792.893:12): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1201718792.911:13): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1201718792.998:14): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1201718793.106:15): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1201719235.508:16): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201719235.510:17): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201719235.512:18): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201719235.512:19): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201719235.512:20): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201719294.767:21): user pid=4279 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201719300.749:22): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201719300.752:23): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201719300.770:24): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201719300.771:25): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201719344.756:26): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201719344.757:27): user pid=4283 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201719490.381:28): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201719490.384:29): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201719490.390:30): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201719490.390:31): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201719661.616:32): user pid=5519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201719661.617:33): user pid=5519 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201719661.617:34): login pid=5519 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201719661.624:35): user pid=5519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201719661.736:36): user pid=5519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201719661.737:37): user pid=5519 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1201720493.978:38): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201720493.981:39): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201720493.982:40): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201720493.982:41): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201720493.982:42): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201721059.363:43): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201721059.364:44): user pid=5013 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201722141.090:45): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201722141.091:46): user pid=2845 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1201722141.583:47): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201722141.584:48): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201722141.585:49): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201722141.586:50): avc:  denied  { signal } for  pid=2789 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1201722141.586:50): arch=c000003e syscall=62 success=yes exit=0 a0=b79 a1=f a2=b79 a3=0 items=0 ppid=1 pid=2789 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201722141.586:51): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1201722149.456:9231): auditd normal halt, sending auid=4294967295 pid=10473 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201724916.060:4496): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2072 res=success
>type=CONFIG_CHANGE msg=audit(1201724916.160:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201724916.160:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201724916.657:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201724916.657:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201724917.780:8): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201724917.781:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201724919.495:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201724919.496:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201724940.469:12): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201724940.487:13): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201724940.523:14): avc:  denied  { create } for  pid=2768 comm="ssh-agent" name="agent.2768" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201724940.523:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2b55bdc0 a2=6e a3=0 items=0 ppid=2660 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201724940.537:15): avc:  denied  { write } for  pid=2660 comm="login" name="agent.2768" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201724940.537:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff10869bf0 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201724940.537:16): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201724940.549:17): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201724940.562:18): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201724954.958:19): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201724954.960:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201724954.961:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201724954.963:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201724954.963:23): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201724954.963:24): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201725005.343:25): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201725005.344:26): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201725005.344:27): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201725005.345:28): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201725006.151:29): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201725006.151:30): user pid=3017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201725006.229:31): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201725006.230:32): avc:  denied  { unlink } for  pid=2769 comm="ssh-agent" name="agent.2768" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201725006.230:32): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2b55b5d0 a2=7fff2b55b4a0 a3=0 items=0 ppid=1 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201725006.230:33): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1201725012.767:4497): auditd normal halt, sending auid=4294967295 pid=3422 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1201799949.903:2691): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2069 res=success
>type=CONFIG_CHANGE msg=audit(1201799950.002:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201799950.002:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1201799950.574:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1201799950.574:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1201799951.556:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1201799951.556:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1201799953.271:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1201799953.272:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1201800093.245:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201800093.263:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201800093.299:14): avc:  denied  { create } for  pid=2862 comm="ssh-agent" name="agent.2862" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201800093.299:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2677f620 a2=6e a3=0 items=0 ppid=2657 pid=2862 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201800093.312:15): avc:  denied  { write } for  pid=2657 comm="login" name="agent.2862" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201800093.312:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff3d6bba40 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1201800093.313:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201800093.325:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1201800093.338:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201800102.552:19): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201800102.555:20): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201800102.556:21): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201800102.557:22): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201800102.557:23): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201800102.558:24): user pid=2997 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201802017.763:25): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201802017.766:26): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201802017.768:27): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201802017.768:28): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1201802017.768:29): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1201802461.028:30): user pid=7957 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1201802461.031:31): user pid=7957 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201802461.037:32): user pid=7957 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="yum-builddeps" (terminal=tty2 res=failed)'
>type=USER_ACCT msg=audit(1201802461.906:33): user pid=7961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201802461.907:34): user pid=7961 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1201802461.908:35): login pid=7961 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1201802461.925:36): user pid=7961 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1201802462.062:37): user pid=7961 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1201802462.063:38): user pid=7961 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1201802468.912:39): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201802468.913:40): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201802468.913:41): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201802468.913:42): user pid=7984 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1201802501.519:43): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1201802501.520:44): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1201802501.520:45): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1201802501.520:46): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)'
>type=USER_START msg=audit(1201805540.002:47): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201805540.002:48): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1201805546.697:49): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1201805546.698:50): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1201805546.733:51): user pid=11325 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1201805546.733:52): user pid=11325 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1201805621.864:53): user pid=11442 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201805621.864:54): user pid=11442 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201805621.864:55): user pid=11442 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1201805628.670:56): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201805628.673:57): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1201805628.673:58): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1201805628.675:59): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201805628.675:60): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1201805628.675:61): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/selinux-policy/F-8/serefpolicy-3.0.8/policy/modules/services" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1201805628.683:62): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1201805628.683:63): user pid=11443 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1201805630.614:64): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1201805630.614:65): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1201805630.615:66): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1201805630.615:67): avc:  denied  { unlink } for  pid=2863 comm="ssh-agent" name="agent.2862" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1201805630.615:67): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2677ee30 a2=7fff2677ed00 a3=0 items=0 ppid=1 pid=2863 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201805630.615:68): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1201805637.558:2692): auditd normal halt, sending auid=4294967295 pid=11854 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202672103.263:6224): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-107.fc8 auid=4294967295 pid=2069 res=success
>type=CONFIG_CHANGE msg=audit(1202672103.362:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202672103.362:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202672103.950:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202672103.950:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202672104.875:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1202672104.875:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1202672106.689:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1202672106.690:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1202672126.950:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202672126.968:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202672127.012:14): avc:  denied  { create } for  pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202672127.012:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff79fbb5b0 a2=6e a3=0 items=0 ppid=2657 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202672127.025:15): avc:  denied  { write } for  pid=2657 comm="login" name="agent.2766" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202672127.025:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffc11604e0 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1202672127.025:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202672127.038:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1202672127.051:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202672136.100:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202672136.103:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202672136.104:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202672136.105:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1202672136.105:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1202672136.105:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202672192.564:25): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1202672192.568:26): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1202672192.569:27): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1202672192.569:28): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1202672192.569:29): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1202672764.581:30): avc:  denied  { read write } for  pid=4650 comm="groupadd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202672764.581:30): arch=c000003e syscall=59 success=yes exit=0 a0=6c7f90 a1=6c6280 a2=6c5fd0 a3=0 items=0 ppid=4647 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202672764.623:31): avc:  denied  { ioctl } for  pid=4650 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202672764.623:31): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff1a5105e0 a3=2aaaaf551412 items=0 ppid=4647 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202672764.623:32): avc:  denied  { getattr } for  pid=4650 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202672764.623:32): arch=c000003e syscall=6 success=yes exit=0 a0=7fff1a514c80 a1=7fff1a5107f0 a2=7fff1a5107f0 a3=2aaaaf551412 items=0 ppid=4647 pid=4650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1202672764.623:33): user pid=4650 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1202672764.624:34): avc:  denied  { read write } for  pid=4653 comm="useradd" name="tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202672764.624:34): arch=c000003e syscall=59 success=yes exit=0 a0=6c8c20 a1=6c6870 a2=6c5fd0 a3=0 items=0 ppid=4647 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202672764.665:35): avc:  denied  { ioctl } for  pid=4653 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202672764.665:35): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffc3e8dcb0 a3=2aaaaf5d2d32 items=0 ppid=4647 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202672764.665:36): avc:  denied  { getattr } for  pid=4653 comm="useradd" path="/dev/tty1" dev=tmpfs ino=226 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202672764.665:36): arch=c000003e syscall=6 success=yes exit=0 a0=7fffc3e92350 a1=7fffc3e8dec0 a2=7fffc3e8dec0 a3=2aaaaf5d2d32 items=0 ppid=4647 pid=4653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1202672764.665:37): user pid=4653 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1202673132.907:38): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202673132.926:39): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202673133.074:40): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202673133.087:41): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1202673147.493:42): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1202673147.494:43): user pid=12501 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202673154.919:44): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202673154.922:45): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202673154.928:46): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202673154.928:47): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202673305.871:48): user pid=13584 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202673305.871:49): user pid=13584 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1202673306.054:50): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1202673306.054:51): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1202673306.055:52): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1202673306.056:53): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202673306.057:54): avc:  denied  { unlink } for  pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=429084 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=CRED_DISP msg=audit(1202673306.062:55): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1202673306.064:56): user pid=12872 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=SYSCALL msg=audit(1202673306.057:54): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff79fbadc0 a2=7fff79fbac90 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1202673314.540:6225): auditd normal halt, sending auid=4294967295 pid=13987 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202673399.290:8738): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-115.fc8 auid=4294967295 pid=2060 res=success
>type=CONFIG_CHANGE msg=audit(1202673399.390:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202673399.390:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202673399.712:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202673399.712:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202673400.844:8): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1202673400.844:9): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1202673402.435:10): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1202673402.435:11): user pid=2083 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1202673433.269:12): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202673433.287:13): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1202673433.390:14): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1202673433.524:15): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1202673469.151:16): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202673469.154:17): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202673470.486:18): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202673470.486:19): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1202673470.486:20): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202673661.066:21): user pid=3987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1202673661.068:22): user pid=3987 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1202673661.068:23): login pid=3987 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1202673661.083:24): user pid=3987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1202673661.203:25): user pid=3987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202673661.204:26): user pid=3987 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1202674042.608:27): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1202674042.612:28): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1202674042.613:29): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1202674042.614:30): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1202674042.614:31): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1202674042.614:32): user pid=26414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='cwd="/usr/bin" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1202677261.218:33): user pid=30126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1202677261.219:34): user pid=30126 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1202677261.219:35): login pid=30126 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1202677261.235:36): user pid=30126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1202677261.261:37): user pid=30126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202677261.262:38): user pid=30126 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1202677309.744:39): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1202677309.763:40): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1202677316.065:41): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1202677316.065:42): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1202677321.218:43): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1202677321.221:44): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1202677321.223:45): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1202677321.223:46): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1202677321.223:47): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1202677343.222:48): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1202677343.225:49): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1202677343.239:50): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1202677343.240:51): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1202677360.241:52): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1202677360.242:53): user pid=30477 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1202678990.664:54): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1202678990.664:55): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1202679004.121:56): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1202679004.122:57): user pid=1316 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1202679004.153:58): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1202679004.153:59): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1202679252.412:60): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1202679252.413:61): user pid=1355 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1202679766.448:62): avc:  denied  { getattr } for  pid=15850 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202679766.448:62): arch=c000003e syscall=6 success=yes exit=0 a0=60442b a1=7fff4f30ac70 a2=7fff4f30ac70 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202679766.448:63): avc:  denied  { search } for  pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202679766.448:63): arch=c000003e syscall=80 success=yes exit=0 a0=60442b a1=7fff4f30a970 a2=0 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202679766.448:64): avc:  denied  { read } for  pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202679766.448:64): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202679766.457:65): avc:  denied  { getattr } for  pid=15850 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=1470265 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202679766.457:65): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff4f30aae0 a2=7fff4f30aae0 a3=3688d529f0 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202679766.457:66): avc:  denied  { setattr } for  pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202679766.457:66): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff4f30ab70 a2=3688d529d8 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202679766.457:67): avc:  denied  { rmdir } for  pid=15850 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202679766.457:67): arch=c000003e syscall=84 success=no exit=-39 a0=60442b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202679766.582:68): avc:  denied  { getattr } for  pid=15850 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1202679766.582:68): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff4f30aae0 a2=7fff4f30aae0 a3=3688b22902 items=0 ppid=15848 pid=15850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_END msg=audit(1202680313.910:69): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202680313.924:70): user pid=2687 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202680314.895:71): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1202680314.896:72): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1202680314.897:73): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202680314.897:74): avc:  denied  { signal } for  pid=2634 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1202680314.897:74): arch=c000003e syscall=62 success=yes exit=0 a0=a92 a1=f a2=a92 a3=0 items=0 ppid=1 pid=2634 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1202680314.898:75): user pid=2634 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1202680318.917:8739): auditd normal halt, sending auid=4294967295 pid=16947 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202744628.132:6717): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-115.fc8 auid=4294967295 pid=2065 res=success
>type=CONFIG_CHANGE msg=audit(1202744628.232:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202744628.232:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202744628.496:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202744628.496:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202744629.247:8): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1202744629.247:9): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1202744631.271:10): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1202744631.271:11): user pid=2088 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1202744659.383:12): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202744659.401:13): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1202744659.496:14): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1202744659.633:15): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1202744684.368:16): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202744684.371:17): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202744684.373:18): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202744684.373:19): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1202744684.373:20): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202745661.934:21): user pid=5117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1202745661.936:22): user pid=5117 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1202745661.936:23): login pid=5117 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1202745661.950:24): user pid=5117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1202745662.071:25): user pid=5117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202745662.072:26): user pid=5117 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202747168.881:27): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202747168.882:28): user pid=2685 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202747169.392:29): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202747169.393:30): avc:  denied  { signal } for  pid=2627 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1202747169.393:30): arch=c000003e syscall=62 success=yes exit=0 a0=a90 a1=f a2=a90 a3=0 items=0 ppid=1 pid=2627 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1202747169.393:31): user pid=2627 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1202747172.768:6718): auditd normal halt, sending auid=4294967295 pid=6585 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202839726.623:9438): auditd start, ver=1.6.5 format=raw kernel=2.6.23.14-115.fc8 auid=4294967295 pid=2066 res=success
>type=CONFIG_CHANGE msg=audit(1202839726.723:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202839726.723:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202839726.928:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202839726.928:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202839727.661:8): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1202839727.661:9): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1202839729.617:10): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1202839729.617:11): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1202839868.531:12): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1202839874.925:13): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1202839879.982:14): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202839879.992:15): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1202839880.087:16): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1202839880.224:17): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1202840307.710:18): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=failed)'
>type=USER_AUTH msg=audit(1202840311.197:19): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1202840311.200:20): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1202840311.200:21): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1202840311.201:22): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1202840311.201:23): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1202840311.202:24): user pid=3924 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/2 res=success)'
>type=AVC msg=audit(1202840645.571:25): avc:  denied  { transition } for  pid=4659 comm="yum" path="/bin/bash" dev=dm-0 ino=197778 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1202840645.571:25): arch=c000003e syscall=59 success=yes exit=0 a0=127445d7 a1=7fffb3180580 a2=9679360 a3=3f51813bb2 items=0 ppid=3924 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202840697.038:26): avc:  denied  { transition } for  pid=7418 comm="yum" path="/bin/bash" dev=dm-0 ino=197778 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1202840697.038:26): arch=c000003e syscall=59 success=yes exit=0 a0=11a996bb a1=7fffb3180580 a2=9679360 a3=3f51813bb2 items=0 ppid=3924 pid=7418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="sh" exe="/bin/bash" subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1202840872.530:27): user pid=2626 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202840872.533:28): user pid=2626 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202840872.537:29): avc:  denied  { create } for  pid=10308 comm="ssh-agent" name="agent.10308" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202840872.537:29): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffd4c4d940 a2=6e a3=0 items=0 ppid=2626 pid=10308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202840872.538:30): avc:  denied  { write } for  pid=2626 comm="login" name="agent.10308" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202840872.538:30): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff2c45c7e0 a2=6e a3=0 items=0 ppid=1 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1202840872.539:31): login pid=2626 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1202840872.547:32): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202840872.550:33): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202840872.550:34): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1202840872.551:35): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1202840970.439:36): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202840970.440:37): avc:  denied  { unlink } for  pid=10309 comm="ssh-agent" name="agent.10308" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202840970.440:37): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffd4c4d150 a2=7fffd4c4d020 a3=0 items=0 ppid=1 pid=10309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1202840970.441:38): user pid=2626 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202841169.236:39): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1202841169.239:40): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1202841169.283:41): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1202841169.283:42): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1202841177.652:43): avc:  denied  { read write } for  pid=11099 comm="mount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202841177.652:43): arch=c000003e syscall=59 success=yes exit=0 a0=a39940 a1=a11a70 a2=a353f0 a3=8 items=0 ppid=10750 pid=11099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1202841230.484:44): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1202841230.485:45): user pid=10742 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1202841704.857:46): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202841704.857:47): user pid=2683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1202841708.671:9439): auditd normal halt, sending auid=4294967295 pid=11897 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202842746.091:7590): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2054 res=success
>type=CONFIG_CHANGE msg=audit(1202842746.190:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202842746.190:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202842746.447:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202842746.447:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202842747.155:8): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1202842747.155:9): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1202842749.202:10): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1202842749.202:11): user pid=2077 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1202842776.620:12): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202842776.638:13): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1202842776.733:14): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1202842776.866:15): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202842861.900:16): user pid=3529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1202842861.901:17): user pid=3529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1202842861.901:18): login pid=3529 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1202842861.916:19): user pid=3529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1202842862.063:20): user pid=3529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202842862.064:21): user pid=3529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1202842994.549:22): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1202842994.552:23): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1202842994.553:24): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1202842994.554:25): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1202842994.554:26): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CMD msg=audit(1202842994.555:27): user pid=3683 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/mount" (terminal=pts/2 res=success)'
>type=AVC msg=audit(1202842994.555:28): avc:  denied  { read write } for  pid=3683 comm="mount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202842994.555:28): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacff850 a1=7fff0e066050 a2=2aaaaacfa990 a3=0 items=0 ppid=3084 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1202843560.002:29): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202843560.002:30): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1202843563.723:7591): auditd normal halt, sending auid=4294967295 pid=4613 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202923140.975:8451): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2052 res=success
>type=CONFIG_CHANGE msg=audit(1202923141.075:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202923141.075:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202923141.339:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202923141.339:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202923142.081:8): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1202923142.082:9): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1202923144.286:10): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1202923144.286:11): user pid=2075 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1202923174.581:12): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202923174.599:13): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1202923174.694:14): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1202923174.837:15): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1202923207.220:16): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202923207.226:17): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202923207.227:18): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202923207.228:19): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1202923207.228:20): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202923216.727:21): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202923216.730:22): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202923216.731:23): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202923216.732:24): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1202923216.732:25): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1202923216.732:26): user pid=3205 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202923300.980:27): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202923300.981:28): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1202923300.981:29): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1202923300.982:30): user pid=3779 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202925661.801:31): user pid=5897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1202925661.802:32): user pid=5897 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1202925661.802:33): login pid=5897 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1202925661.816:34): user pid=5897 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1202925661.939:35): user pid=5897 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202925661.940:36): user pid=5897 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1202928732.858:37): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1202928732.858:38): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1202928739.708:39): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1202928739.709:40): user pid=9592 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1202928739.737:41): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1202928739.737:42): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1202929004.014:43): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1202929004.014:44): user pid=9616 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1202929174.108:45): avc:  denied  { getattr } for  pid=10192 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202929174.108:45): arch=c000003e syscall=6 success=yes exit=0 a0=6043c3 a1=7fffdea24380 a2=7fffdea24380 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202929174.109:46): avc:  denied  { search } for  pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202929174.109:46): arch=c000003e syscall=80 success=yes exit=0 a0=6043c3 a1=7fffdea24080 a2=0 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202929174.109:47): avc:  denied  { read } for  pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202929174.109:47): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202929174.117:48): avc:  denied  { getattr } for  pid=10192 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1202929174.117:48): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffdea241f0 a2=7fffdea241f0 a3=3688d529f0 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202929174.117:49): avc:  denied  { setattr } for  pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202929174.117:49): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffdea24280 a2=3688d529d8 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202929174.118:50): avc:  denied  { rmdir } for  pid=10192 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1202929174.118:50): arch=c000003e syscall=84 success=no exit=-39 a0=6043c3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1202929174.171:51): avc:  denied  { getattr } for  pid=10192 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1202929174.171:51): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffdea241f0 a2=7fffdea241f0 a3=3688b22902 items=0 ppid=10190 pid=10192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1202929261.973:52): user pid=10315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1202929261.975:53): user pid=10315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1202929261.975:54): login pid=10315 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1202929261.990:55): user pid=10315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1202929262.019:56): user pid=10315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202929262.020:57): user pid=10315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1202929740.996:58): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202929740.996:59): user pid=2670 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202929741.800:60): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1202929741.801:61): avc:  denied  { signal } for  pid=2614 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1202929741.801:61): arch=c000003e syscall=62 success=yes exit=0 a0=a81 a1=f a2=a81 a3=0 items=0 ppid=1 pid=2614 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1202929741.801:62): user pid=2614 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1202929745.436:8452): auditd normal halt, sending auid=4294967295 pid=11014 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1202937051.083:4254): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2058 res=success
>type=CONFIG_CHANGE msg=audit(1202937051.183:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202937051.183:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1202937051.596:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1202937051.596:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1202937052.380:8): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1202937052.380:9): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1202937054.452:10): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1202937054.452:11): user pid=2081 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1202937107.437:12): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1202937111.974:13): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1202937111.982:14): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1202937112.068:15): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1202937112.210:16): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1202937154.171:17): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1202937154.374:18): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1202937160.689:19): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1202937160.689:20): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1202937172.242:21): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1202937172.246:22): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1202937172.290:23): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1202937172.290:24): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=AVC msg=audit(1202937193.067:25): avc:  denied  { read write } for  pid=3973 comm="umount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202937193.067:25): arch=c000003e syscall=59 success=yes exit=0 a0=92dfc0 a1=92d630 a2=8f0890 a3=8 items=0 ppid=3972 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1202937294.333:26): avc:  denied  { read write } for  pid=5166 comm="mount" name="2" dev=devpts ino=4 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1202937294.333:26): arch=c000003e syscall=59 success=yes exit=0 a0=92c470 a1=8cccd0 a2=8fe2b0 a3=8 items=0 ppid=5152 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1202937327.861:27): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1202937327.862:28): user pid=3551 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1202937401.307:29): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1202937401.310:30): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1202937401.312:31): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1202937401.312:32): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1202937401.312:33): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1202937610.587:34): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1202937610.590:35): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1202937610.591:36): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1202937610.591:37): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1202937610.591:38): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1202938953.076:39): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202938953.076:40): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1202938953.610:41): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1202938953.610:42): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1202938953.611:43): avc:  denied  { signal } for  pid=4115 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=USER_END msg=audit(1202938953.611:44): user pid=2625 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=SYSCALL msg=audit(1202938953.611:43): arch=c000003e syscall=62 success=yes exit=0 a0=a8a a1=f a2=a8a a3=0 items=0 ppid=1 pid=4115 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1202938953.611:45): user pid=4115 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1202938961.354:4255): auditd normal halt, sending auid=4294967295 pid=8262 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203003372.323:8207): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2099 res=success
>type=CONFIG_CHANGE msg=audit(1203003372.423:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203003372.423:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203003372.870:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203003372.870:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203003373.861:8): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1203003373.861:9): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1203003375.783:10): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1203003375.783:11): user pid=2122 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1203003442.184:12): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1203003442.203:13): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1203003442.306:14): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1203003442.447:15): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1203003453.388:16): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203003453.391:17): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203003453.392:18): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203003453.392:19): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203003453.393:20): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203003464.731:21): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1203003469.096:22): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203003469.099:23): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203003469.099:24): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203003469.101:25): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203003469.101:26): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203003469.101:27): user pid=3363 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203003798.090:28): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203003798.093:29): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203003798.095:30): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203003798.095:31): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203003798.095:32): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1203004150.628:33): avc:  denied  { read write } for  pid=4991 comm="useradd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004150.628:33): arch=c000003e syscall=59 success=yes exit=0 a0=8cb0f0 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=4990 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203004150.694:34): avc:  denied  { ioctl } for  pid=4991 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004150.694:34): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff72117f00 a3=2aaaaf5d2d32 items=0 ppid=4990 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203004150.694:35): avc:  denied  { getattr } for  pid=4991 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004150.694:35): arch=c000003e syscall=6 success=yes exit=0 a0=7fff7211c5a0 a1=7fff72118110 a2=7fff72118110 a3=2aaaaf5d2d32 items=0 ppid=4990 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203004150.694:36): user pid=4991 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=ldap exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_START msg=audit(1203004154.062:37): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203004154.062:38): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203004154.087:39): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203004154.087:40): user pid=5010 uid=0 auid=4294967295 subj=system_u:system_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1203004178.513:41): avc:  denied  { read write } for  pid=5176 comm="groupadd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004178.513:41): arch=c000003e syscall=59 success=yes exit=0 a0=8c9cb0 a1=8c7f70 a2=8c7fd0 a3=3688d529f0 items=0 ppid=5175 pid=5176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203004178.560:42): user pid=5176 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=gnokii exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=AVC msg=audit(1203004193.368:43): avc:  denied  { read write } for  pid=5201 comm="groupadd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004193.368:43): arch=c000003e syscall=59 success=yes exit=0 a0=8c9f90 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=5200 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203004193.370:44): avc:  denied  { ioctl } for  pid=5201 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004193.370:44): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fffab36a4d0 a3=2aaaaf551412 items=0 ppid=5200 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203004193.370:45): avc:  denied  { getattr } for  pid=5201 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004193.370:45): arch=c000003e syscall=6 success=yes exit=0 a0=7fffab36eb70 a1=7fffab36a6e0 a2=7fffab36a6e0 a3=2aaaaf551412 items=0 ppid=5200 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203004193.370:46): user pid=5201 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=tomcat exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1203004193.371:47): avc:  denied  { read write } for  pid=5202 comm="useradd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004193.371:47): arch=c000003e syscall=59 success=yes exit=0 a0=8cac20 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=5200 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203004193.374:48): avc:  denied  { ioctl } for  pid=5202 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004193.374:48): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff61658720 a3=2aaaaf5d2d32 items=0 ppid=5200 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203004193.374:49): avc:  denied  { getattr } for  pid=5202 comm="useradd" path="/dev/tty1" dev=tmpfs ino=227 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004193.374:49): arch=c000003e syscall=6 success=yes exit=0 a0=7fff6165cdc0 a1=7fff61658930 a2=7fff61658930 a3=2aaaaf5d2d32 items=0 ppid=5200 pid=5202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203004193.374:50): user pid=5202 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=tomcat exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1203004196.478:51): user pid=5684 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1203004196.505:52): user pid=5685 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1203004506.353:53): avc:  denied  { read write } for  pid=8866 comm="groupadd" name="tty1" dev=tmpfs ino=227 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203004506.353:53): arch=c000003e syscall=59 success=yes exit=0 a0=8c9cb0 a1=8c7f70 a2=8c7fd0 a3=3688d529f0 items=0 ppid=8865 pid=8866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203004506.355:54): user pid=8866 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=gnokii exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_START msg=audit(1203004742.550:55): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203004742.550:56): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203004742.778:57): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203004742.778:58): user pid=9505 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1203004861.404:59): user pid=9663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203004861.405:60): user pid=9663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203004861.405:61): login pid=9663 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203004861.466:62): user pid=9663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203004861.644:63): user pid=9663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203004861.645:64): user pid=9663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203007831.754:65): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_LOGIN msg=audit(1203007831.767:66): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_AUTH msg=audit(1203007835.367:67): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203007835.370:68): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203007835.387:69): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203007835.400:70): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1203007835.415:71): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203008461.658:72): user pid=2794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203008461.659:73): user pid=2794 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203008461.659:74): login pid=2794 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203008461.673:75): user pid=2794 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203008461.695:76): user pid=2794 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203008461.698:77): user pid=2794 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1203008966.586:78): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203008966.586:79): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203008986.260:80): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203008986.260:81): user pid=3717 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1203008986.289:82): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203008986.289:83): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203009291.239:84): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203009291.239:85): user pid=3753 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1203009723.749:86): avc:  denied  { getattr } for  pid=12990 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203009723.749:86): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fff9da36270 a2=7fff9da36270 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203009723.749:87): avc:  denied  { search } for  pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203009723.749:87): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fff9da35f70 a2=0 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203009723.750:88): avc:  denied  { read } for  pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203009723.750:88): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203009723.758:89): avc:  denied  { getattr } for  pid=12990 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203009723.758:89): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff9da360e0 a2=7fff9da360e0 a3=3688d529f0 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203009723.758:90): avc:  denied  { setattr } for  pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203009723.758:90): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff9da36170 a2=3688d529d8 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203009723.758:91): avc:  denied  { rmdir } for  pid=12990 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203009723.758:91): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203009723.849:92): avc:  denied  { getattr } for  pid=12990 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1203009723.849:92): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff9da360e0 a2=7fff9da360e0 a3=3688b22902 items=0 ppid=12988 pid=12990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1203012061.811:93): user pid=17743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203012061.812:94): user pid=17743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203012061.812:95): login pid=17743 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203012061.858:96): user pid=17743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203012061.994:97): user pid=17743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203012061.995:98): user pid=17743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1203015661.006:99): user pid=21190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203015661.008:100): user pid=21190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203015661.008:101): login pid=21190 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203015661.022:102): user pid=21190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203015661.059:103): user pid=21190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203015661.060:104): user pid=21190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203016724.716:105): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1203016724.754:106): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1203016726.994:107): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203016726.995:108): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203016726.997:109): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1203016726.998:110): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203016726.998:111): user pid=2834 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1203016726.998:112): avc:  denied  { signal } for  pid=2832 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1203016726.998:112): arch=c000003e syscall=62 success=yes exit=0 a0=b5d a1=f a2=b5d a3=0 items=0 ppid=1 pid=2832 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1203016726.999:113): user pid=2832 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1203016738.993:8208): auditd normal halt, sending auid=4294967295 pid=22627 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203017606.093:5077): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2067 res=success
>type=CONFIG_CHANGE msg=audit(1203017606.193:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203017606.193:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203017606.731:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203017606.731:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203017607.689:8): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1203017607.689:9): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1203017609.332:10): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1203017609.333:11): user pid=2090 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1203017625.336:12): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203017625.354:13): user pid=2656 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203017625.398:14): avc:  denied  { create } for  pid=2767 comm="ssh-agent" name="agent.2767" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203017625.398:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffe111c190 a2=6e a3=0 items=0 ppid=2656 pid=2767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203017625.411:15): avc:  denied  { write } for  pid=2656 comm="login" name="agent.2767" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203017625.411:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff621b1530 a2=6e a3=0 items=0 ppid=1 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1203017625.411:16): login pid=2656 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1203017625.422:17): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203017625.427:18): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203017625.441:19): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203017625.441:20): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203017799.950:21): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203017799.952:22): user pid=2656 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203017799.963:23): avc:  denied  { unlink } for  pid=2768 comm="ssh-agent" name="agent.2767" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203017799.963:23): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffe111b9a0 a2=7fffe111b870 a3=0 items=0 ppid=1 pid=2768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1203017806.731:5078): auditd normal halt, sending auid=4294967295 pid=3499 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203274190.591:5183): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2063 res=success
>type=CONFIG_CHANGE msg=audit(1203274190.690:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203274190.690:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203274191.320:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203274191.320:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203274192.294:8): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1203274192.294:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1203274193.918:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1203274193.918:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1203274212.014:12): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203274212.033:13): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203274212.077:14): avc:  denied  { create } for  pid=2757 comm="ssh-agent" name="agent.2757" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203274212.077:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff1e1540a0 a2=6e a3=0 items=0 ppid=2644 pid=2757 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203274212.090:15): avc:  denied  { write } for  pid=2644 comm="login" name="agent.2757" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203274212.090:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff9d305680 a2=6e a3=0 items=0 ppid=1 pid=2644 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1203274212.091:16): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203274212.103:17): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203274212.115:18): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203274227.110:19): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203274227.113:20): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203274227.114:21): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203274227.115:22): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203274227.115:23): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203274227.115:24): user pid=2887 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203274307.589:25): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203274307.592:26): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203274307.593:27): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203274307.594:28): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203274307.594:29): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203274402.178:30): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203274402.181:31): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203274402.195:32): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203274402.196:33): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203274402.196:34): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203274402.196:35): user pid=8141 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/libffi/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=AVC msg=audit(1203274571.998:36): avc:  denied  { read write } for  pid=8653 comm="groupadd" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274571.998:36): arch=c000003e syscall=59 success=yes exit=0 a0=8cb3c0 a1=8c8280 a2=8c7fd0 a3=65 items=0 ppid=8650 pid=8653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203274572.058:37): avc:  denied  { ioctl } for  pid=8653 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274572.058:37): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff83c8a0e0 a3=2aaaaf551412 items=0 ppid=8650 pid=8653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203274572.058:38): avc:  denied  { getattr } for  pid=8653 comm="groupadd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274572.058:38): arch=c000003e syscall=6 success=yes exit=0 a0=7fff83c8e780 a1=7fff83c8a2f0 a2=7fff83c8a2f0 a3=2aaaaf551412 items=0 ppid=8650 pid=8653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="groupadd" exe="/usr/sbin/groupadd" subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203274572.058:39): user pid=8653 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct=beaglidx exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1203274572.059:40): avc:  denied  { read write } for  pid=8654 comm="useradd" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274572.059:40): arch=c000003e syscall=59 success=yes exit=0 a0=8cab00 a1=8c9d70 a2=8c7fd0 a3=65 items=0 ppid=8650 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203274572.108:41): avc:  denied  { ioctl } for  pid=8654 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274572.108:41): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7ffff8b01980 a3=2aaaaf5d2d32 items=0 ppid=8650 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203274572.109:42): avc:  denied  { getattr } for  pid=8654 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274572.109:42): arch=c000003e syscall=6 success=yes exit=0 a0=7ffff8b06020 a1=7ffff8b01b90 a2=7ffff8b01b90 a3=2aaaaf5d2d32 items=0 ppid=8650 pid=8654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1203274572.109:43): user pid=8654 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=beaglidx exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1203274617.384:44): user pid=8761 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1203274699.629:45): avc:  denied  { read write } for  pid=8928 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274699.629:45): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfb0 a1=2aaab2aaa440 a2=0 a3=0 items=0 ppid=8886 pid=8928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1203274700.107:46): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1203274699.786:47): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1203274699.786:47): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=8886 pid=8928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1203274815.443:48): user pid=2457 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1203274823.864:49): avc:  denied  { read write } for  pid=3537 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274823.864:49): arch=c000003e syscall=59 success=yes exit=0 a0=9e6890 a1=20894a0 a2=0 a3=2aaaaaaef210 items=0 ppid=2691 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1203274824.325:50): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1203274824.006:51): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1203274824.006:51): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=2691 pid=3537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1203274825.030:52): user pid=2691 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203274833.247:53): avc:  denied  { read write } for  pid=5393 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274833.247:53): arch=c000003e syscall=59 success=yes exit=0 a0=1bdb1a0 a1=8fb6730 a2=0 a3=2aaaaaaef210 items=0 ppid=3745 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1203274833.711:54): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1203274833.391:55): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1203274833.391:55): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=3745 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1203274834.128:56): user pid=3745 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1203274835.409:57): user pid=5596 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1203274843.147:58): avc:  denied  { read write } for  pid=5610 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274843.147:58): arch=c000003e syscall=59 success=yes exit=0 a0=9e6890 a1=20894a0 a2=0 a3=2aaaaaaef210 items=0 ppid=5598 pid=5610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1203274843.628:59): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1203274843.303:60): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1203274843.303:60): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=5598 pid=5610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1203274844.059:61): user pid=5598 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203274852.417:62): avc:  denied  { read write } for  pid=7244 comm="load_policy" name="tty1" dev=tmpfs ino=2573 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1203274852.417:62): arch=c000003e syscall=59 success=yes exit=0 a0=1bdb1a0 a1=8fb6730 a2=0 a3=2aaaaaaef210 items=0 ppid=5612 pid=7244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1203274852.882:63): user pid=2103 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1203274852.555:64): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1203274852.555:64): arch=c000003e syscall=1 success=yes exit=4101690 a0=4 a1=2aaaab87a000 a2=3e963a a3=0 items=0 ppid=5612 pid=7244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1203274853.954:65): user pid=5612 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203274861.380:66): user pid=9019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203274861.381:67): user pid=9019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203274861.381:68): login pid=9019 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203274861.391:69): user pid=9019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203274861.615:70): user pid=9019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203274861.616:71): user pid=9019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203274936.794:72): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203274936.796:73): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203274936.827:74): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203274936.828:75): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203274975.452:76): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203274975.453:77): user pid=21448 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203275426.186:78): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203275426.189:79): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203275426.191:80): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203275426.191:81): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1203275426.191:82): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203278461.629:83): user pid=9733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203278461.631:84): user pid=9733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203278461.631:85): login pid=9733 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203278461.641:86): user pid=9733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203278461.663:87): user pid=9733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203278461.664:88): user pid=9733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1203279779.407:89): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203279779.407:90): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203279786.021:91): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203279786.022:92): user pid=11200 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1203279786.035:93): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203279786.035:94): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1203280031.900:95): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203280031.903:96): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280031.904:97): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280031.906:98): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280031.906:99): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280031.906:100): user pid=28146 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280042.761:101): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280042.761:102): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280042.761:103): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280042.762:104): user pid=28156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1203280092.897:105): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203280092.898:106): user pid=11369 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203280110.080:107): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280110.081:108): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280110.081:109): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280110.082:110): user pid=30254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280123.792:111): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280123.793:112): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280123.793:113): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280123.793:114): user pid=30262 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280236.956:115): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280236.957:116): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280236.957:117): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280236.957:118): user pid=31201 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=AVC msg=audit(1203280406.572:119): avc:  denied  { getattr } for  pid=32379 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203280406.572:119): arch=c000003e syscall=6 success=yes exit=0 a0=60442b a1=7fffe36c8020 a2=7fffe36c8020 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203280406.572:120): avc:  denied  { search } for  pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203280406.572:120): arch=c000003e syscall=80 success=yes exit=0 a0=60442b a1=7fffe36c7d20 a2=0 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203280406.572:121): avc:  denied  { read } for  pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203280406.572:121): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203280406.581:122): avc:  denied  { getattr } for  pid=32379 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203280406.581:122): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffe36c7e90 a2=7fffe36c7e90 a3=3688d529f0 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203280406.581:123): avc:  denied  { setattr } for  pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203280406.581:123): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffe36c7f20 a2=3688d529d8 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203280406.581:124): avc:  denied  { rmdir } for  pid=32379 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203280406.581:124): arch=c000003e syscall=84 success=no exit=-39 a0=60442b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203280406.652:125): avc:  denied  { getattr } for  pid=32379 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1203280406.652:125): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffe36c7e90 a2=7fffe36c7e90 a3=3688b22902 items=0 ppid=32376 pid=32379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_AUTH msg=audit(1203280588.451:126): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203280588.454:127): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280588.455:128): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280588.456:129): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280588.456:130): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280588.457:131): user pid=32548 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280598.371:132): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280598.372:133): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280598.372:134): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280598.372:135): user pid=32609 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280619.956:136): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280619.957:137): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280619.957:138): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280619.957:139): user pid=32670 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280626.441:140): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280626.442:141): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280626.442:142): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280626.443:143): user pid=32671 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203280635.907:144): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203280635.908:145): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203280635.908:146): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203280635.908:147): user pid=32679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1203280744.694:148): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1203280744.697:149): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203280744.728:150): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203280744.728:151): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_LOGIN msg=audit(1203280744.775:152): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_AUTH msg=audit(1203280905.096:153): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1203280905.099:154): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203280905.100:155): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203280905.101:156): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203280905.101:157): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203280905.101:158): user pid=770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203280927.263:159): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203280927.263:160): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203280927.263:161): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203280927.264:162): user pid=847 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum-builddep" (terminal=tty4 res=success)'
>type=USER_AUTH msg=audit(1203281041.560:163): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203281041.562:164): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203281041.562:165): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203281041.563:166): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203281041.563:167): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203281041.564:168): user pid=1016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203281071.916:169): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203281071.917:170): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203281071.917:171): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203281071.917:172): user pid=1106 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/gnu-smalltalk/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203282062.047:173): user pid=15345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203282062.048:174): user pid=15345 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203282062.048:175): login pid=15345 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203282062.339:176): user pid=15345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203282062.859:177): user pid=15345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203282062.860:178): user pid=15345 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203282615.109:179): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203282615.138:180): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203282615.169:181): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203282615.174:182): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203282615.174:183): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203282615.175:184): user pid=27377 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203282717.086:185): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203282717.087:186): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203282717.087:187): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203282717.088:188): user pid=27451 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203282841.721:189): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203282841.723:190): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203282841.723:191): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203282841.723:192): user pid=27608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum-builddep" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203282880.935:193): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203282880.935:194): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203282880.935:195): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203282880.936:196): user pid=27679 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203282907.847:197): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203282907.848:198): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203282907.848:199): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203282907.848:200): user pid=27751 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203283529.926:201): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203283529.945:202): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203283529.968:203): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203283529.969:204): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203283529.969:205): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203283529.969:206): user pid=6608 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1203283552.058:207): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:mono_t:s0-s0:c0.c1023 pid=6705 comm="beagled-helper" sig=11
>type=USER_AUTH msg=audit(1203285046.797:208): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203285046.816:209): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203285046.868:210): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203285046.879:211): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203285046.879:212): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203285046.879:213): user pid=21257 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde4" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285207.018:214): user pid=29656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=floppy exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285207.023:215): user pid=29660 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=vcsa exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285216.474:216): user pid=30405 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=rpm exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285216.483:217): user pid=30410 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=rpm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285219.871:218): user pid=30581 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285225.393:219): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=utmp exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285227.052:220): user pid=31186 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1203285227.065:221): user pid=31202 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1203285227.078:222): user pid=31214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285227.219:223): user pid=31223 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1203285227.240:224): user pid=31223 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct=mockbuild exe="?" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1203285641.110:225): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1203285641.113:226): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203285641.139:227): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203285641.149:228): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203285641.149:229): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203285641.149:230): user pid=2078 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1203285662.013:231): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203285662.014:232): user pid=2250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203285662.014:233): login pid=2250 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203285662.122:234): user pid=2250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203285662.490:235): user pid=2250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203285662.491:236): user pid=2250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203285698.382:237): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203285698.384:238): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203285698.384:239): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203285698.385:240): user pid=3007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)'
>type=USER_AUTH msg=audit(1203286623.999:241): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1203286624.043:242): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203286624.058:243): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203286624.072:244): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203286624.072:245): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203286624.073:246): user pid=15486 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203286643.868:247): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203286643.869:248): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203286643.869:249): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203286643.869:250): user pid=15651 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/usr/bin/yum" (terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203286711.237:251): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203286711.238:252): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203286711.238:253): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203286711.239:254): user pid=16249 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1203286719.872:255): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1203286719.873:256): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203286719.873:257): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1203286719.874:258): user pid=16263 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)'
>type=USER_AUTH msg=audit(1203286770.193:259): user pid=16363 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1203286770.193:260): user pid=16363 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1203286770.193:261): user pid=16363 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1203286780.303:262): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1203286783.458:263): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203286783.461:264): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203286783.461:265): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203286783.462:266): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203286783.462:267): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203286783.462:268): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203286783.469:269): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203286783.469:270): user pid=16370 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203286783.602:271): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203286783.603:272): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_DISP msg=audit(1203286783.744:273): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203286783.807:274): user pid=2647 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1203286783.808:275): user pid=2644 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203286783.808:276): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203286783.812:277): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203286783.832:278): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1203286783.832:279): avc:  denied  { unlink } for  pid=2758 comm="ssh-agent" name="agent.2757" dev=dm-0 ino=359723 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203286783.832:279): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff1e1538b0 a2=7fff1e153780 a3=0 items=0 ppid=1 pid=2758 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1203286799.702:5184): auditd normal halt, sending auid=4294967295 pid=16789 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203350293.723:7981): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2063 res=success
>type=CONFIG_CHANGE msg=audit(1203350293.823:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203350293.823:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203350294.229:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203350294.229:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203350295.178:8): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1203350295.178:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1203350296.354:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1203350296.355:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1203350314.434:12): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203350314.452:13): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203350314.488:14): avc:  denied  { create } for  pid=2760 comm="ssh-agent" name="agent.2760" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203350314.488:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7ffff0c65720 a2=6e a3=0 items=0 ppid=2651 pid=2760 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203350314.510:15): avc:  denied  { write } for  pid=2651 comm="login" name="agent.2760" dev=dm-0 ino=1960488 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203350314.510:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff559d6d50 a2=6e a3=0 items=0 ppid=1 pid=2651 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1203350314.510:16): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203350314.522:17): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203350314.535:18): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203350322.272:19): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203350322.275:20): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203350322.276:21): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203350322.277:22): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203350322.278:23): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203350322.278:24): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203350373.722:25): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203350373.725:26): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203350373.726:27): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203350373.726:28): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203350373.727:29): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203350461.653:30): user pid=5372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203350461.654:31): user pid=5372 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203350461.654:32): login pid=5372 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203350461.688:33): user pid=5372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203350461.830:34): user pid=5372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203350461.831:35): user pid=5372 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203350975.668:36): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203350975.672:37): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203350975.673:38): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203350975.673:39): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1203350975.674:40): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1203351102.891:41): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203351102.894:42): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203351102.902:43): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203351102.902:44): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203351138.566:45): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203351138.567:46): user pid=15171 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203351144.329:47): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203351144.332:48): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203351144.338:49): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203351144.338:50): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203351154.547:51): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203351154.548:52): user pid=15570 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203352172.422:53): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203352172.424:54): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203352172.432:55): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203352172.434:56): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203352172.434:57): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203352172.434:58): user pid=26827 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203352228.082:59): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203352228.083:60): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203352228.083:61): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203352228.083:62): user pid=26869 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203354062.594:63): user pid=10442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203354062.595:64): user pid=10442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203354062.596:65): login pid=10442 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203354063.306:66): user pid=10442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203354064.328:67): user pid=10442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203354064.328:68): user pid=10442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203354359.685:69): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203354359.688:70): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203354359.703:71): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203354359.704:72): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203354359.705:73): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203354359.705:74): user pid=21068 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203354415.770:75): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203354415.771:76): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203354415.771:77): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203354415.771:78): user pid=21118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=USER_START msg=audit(1203356257.720:79): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203356257.720:80): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203356319.501:81): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203356319.501:82): user pid=15019 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1203356319.599:83): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203356319.600:84): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1203356661.696:85): user pid=25733 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_AUTH msg=audit(1203356668.506:86): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203356668.542:87): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203356668.577:88): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203356668.579:89): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203356668.579:90): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203356668.579:91): user pid=25741 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1203356835.262:92): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203356835.263:93): user pid=15805 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1203357583.266:94): avc:  denied  { getattr } for  pid=6612 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203357583.266:94): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fffd03e8d50 a2=7fffd03e8d50 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203357583.266:95): avc:  denied  { search } for  pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203357583.266:95): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fffd03e8a50 a2=0 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203357583.266:96): avc:  denied  { read } for  pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203357583.266:96): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203357583.275:97): avc:  denied  { getattr } for  pid=6612 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163926 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203357583.275:97): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffd03e8bc0 a2=7fffd03e8bc0 a3=3688d529f0 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203357583.275:98): avc:  denied  { setattr } for  pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203357583.275:98): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffd03e8c50 a2=3688d529d8 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203357583.275:99): avc:  denied  { rmdir } for  pid=6612 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203357583.275:99): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203357583.400:100): avc:  denied  { getattr } for  pid=6612 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1203357583.400:100): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffd03e8bc0 a2=7fffd03e8bc0 a3=3688b22902 items=0 ppid=6610 pid=6612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1203357661.516:101): user pid=6720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203357661.518:102): user pid=6720 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203357661.518:103): login pid=6720 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203357661.602:104): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203357661.698:105): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203357661.699:106): user pid=6720 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203359133.890:107): user pid=7913 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1203359133.891:108): user pid=7913 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1203359133.891:109): user pid=7913 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1203359139.236:110): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203359139.238:111): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203359139.264:112): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203359139.265:113): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203359139.265:114): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203359139.266:115): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203359139.273:116): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203359139.273:117): user pid=7914 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203359139.623:118): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203359139.657:119): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203359139.679:120): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203359139.685:121): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1203359139.722:122): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203359139.746:123): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1203359139.758:124): avc:  denied  { unlink } for  pid=2761 comm="ssh-agent" name="agent.2760" dev=dm-0 ino=1960488 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203359139.758:124): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7ffff0c64f30 a2=7ffff0c64e00 a3=0 items=0 ppid=1 pid=2761 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1203359156.116:7982): auditd normal halt, sending auid=4294967295 pid=8326 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203450559.846:3476): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2061 res=success
>type=CONFIG_CHANGE msg=audit(1203450559.946:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203450559.946:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203450560.500:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203450560.500:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203450561.566:8): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1203450561.566:9): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1203450562.941:10): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1203450562.941:11): user pid=2084 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1203450592.879:12): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1203450592.897:13): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1203450592.992:14): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1203450593.146:15): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1203450596.190:16): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3075 comm="pulseaudio" sig=6
>type=USER_AUTH msg=audit(1203450601.884:17): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203450601.886:18): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203450601.888:19): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203450601.888:20): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203450601.888:21): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203450609.596:22): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203450609.598:23): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203450609.599:24): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203450609.600:25): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203450609.601:26): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203450609.601:27): user pid=3255 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=AVC msg=audit(1203450633.931:28): avc:  denied  { execheap } for  pid=3372 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1203450633.931:28): arch=c000003e syscall=10 success=yes exit=0 a0=f06000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3372 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1203450992.465:29): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203450992.468:30): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203450992.470:31): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203450992.470:32): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203450992.470:33): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203451229.126:34): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203451229.128:35): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203451229.143:36): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203451229.143:37): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203451261.805:38): user pid=7818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=failed)'
>type=USER_ACCT msg=audit(1203451261.810:39): user pid=7818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=failed)'
>type=USER_END msg=audit(1203451424.923:40): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1203451424.923:41): user pid=2837 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1203451425.580:42): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203451425.581:43): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203451425.582:44): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1203451425.583:45): avc:  denied  { signal } for  pid=2783 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1203451425.583:45): arch=c000003e syscall=62 success=yes exit=0 a0=b28 a1=f a2=b28 a3=0 items=0 ppid=1 pid=2783 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1203451425.583:46): user pid=2783 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203451425.587:47): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203451425.590:48): user pid=7420 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1203451433.148:3477): auditd normal halt, sending auid=4294967295 pid=8446 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203534733.753:6017): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2072 res=success
>type=CONFIG_CHANGE msg=audit(1203534733.853:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203534733.853:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203534734.176:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203534734.176:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203534735.009:8): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1203534735.009:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1203534736.558:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1203534736.558:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1203534755.268:12): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203534755.270:13): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203534755.328:14): avc:  denied  { create } for  pid=2768 comm="ssh-agent" name="agent.2768" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203534755.328:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff6ed19fc0 a2=6e a3=0 items=0 ppid=2660 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203534755.329:15): avc:  denied  { write } for  pid=2660 comm="login" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203534755.329:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff04ef6290 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1203534755.329:16): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203534755.338:17): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203534755.353:18): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203534764.363:19): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203534764.366:20): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203534764.367:21): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203534764.368:22): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203534764.368:23): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203534764.368:24): user pid=2897 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203534770.203:25): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203534770.206:26): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203534770.207:27): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203534770.207:28): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203534770.208:29): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203535931.069:30): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203535931.072:31): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203535931.160:32): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203535931.186:33): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1203535931.248:34): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1203536601.797:35): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203536601.799:36): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203536602.245:37): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203536602.257:38): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203536775.862:39): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203536775.864:40): user pid=30061 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203537661.800:41): user pid=9051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203537661.802:42): user pid=9051 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203537661.802:43): login pid=9051 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203537661.869:44): user pid=9051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203537662.101:45): user pid=9051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203537662.102:46): user pid=9051 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203538821.605:47): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203538821.607:48): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203538821.620:49): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203538821.620:50): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203538821.620:51): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203538821.621:52): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203538821.822:53): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203538821.823:54): user pid=19941 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203538822.130:55): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203538822.131:56): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203538822.131:57): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203538822.132:58): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203538822.133:59): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203538822.134:60): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1203538822.140:61): avc:  denied  { unlink } for  pid=2769 comm="ssh-agent" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203538822.140:61): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff6ed197d0 a2=7fff6ed196a0 a3=0 items=0 ppid=1 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1203538837.691:6018): auditd normal halt, sending auid=4294967295 pid=20353 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203617163.045:2623): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2064 res=success
>type=CONFIG_CHANGE msg=audit(1203617163.145:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203617163.145:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203617163.625:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203617163.625:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203617164.674:8): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1203617164.674:9): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1203617166.256:10): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1203617166.256:11): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1203617237.576:12): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1203617244.239:13): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1203617244.241:14): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1203617244.337:15): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1203617244.481:16): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=AVC msg=audit(1203617286.937:17): avc:  denied  { execheap } for  pid=3259 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1203617286.937:17): arch=c000003e syscall=10 success=yes exit=0 a0=e70000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3259 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203618456.377:18): avc:  denied  { write } for  pid=4891 comm="mount" path="/home/s4504kr/.xsession-errors" dev=dm-1 ino=3183680 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:unconfined_home_t:s0 tclass=file
>type=AVC msg=audit(1203618456.377:18): avc:  denied  { write } for  pid=4891 comm="mount" path="/tmp/kde-s4504kr/kio_fileUJQrAb.tmp" dev=dm-0 ino=331413 scontext=system_u:system_r:mount_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xdm_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1203618456.377:18): arch=c000003e syscall=59 success=yes exit=0 a0=8cbdb0 a1=8cafd0 a2=8ca250 a3=65 items=0 ppid=4890 pid=4891 auid=4294967295 uid=500 gid=500 euid=0 suid=0 fsuid=0 egid=500 sgid=500 fsgid=500 tty=(none) comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1203620128.680:19): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1203620128.680:20): user pid=2840 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1203620137.057:2624): auditd normal halt, sending auid=4294967295 pid=6904 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203879723.458:8187): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2072 res=success
>type=CONFIG_CHANGE msg=audit(1203879723.558:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203879723.558:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203879723.880:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203879723.880:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203879724.739:8): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1203879724.739:9): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1203879726.794:10): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1203879726.794:11): user pid=2095 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1203879743.422:12): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203879743.425:13): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203879743.468:14): avc:  denied  { create } for  pid=2768 comm="ssh-agent" name="agent.2768" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203879743.468:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff21bd74d0 a2=6e a3=0 items=0 ppid=2660 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203879743.469:15): avc:  denied  { write } for  pid=2660 comm="login" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203879743.469:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffb3cb7020 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1203879743.470:16): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203879743.476:17): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203879743.490:18): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203879756.564:19): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203879756.567:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203879756.568:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203879756.569:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203879756.569:23): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203879756.569:24): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203879995.650:25): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203879995.651:26): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203879995.651:27): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203879995.651:28): user pid=3134 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203880034.569:29): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203880034.570:30): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203880034.570:31): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203880034.570:32): user pid=3154 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203880111.437:33): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203880111.438:34): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203880111.438:35): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203880111.438:36): user pid=3224 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203880138.444:37): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203880138.445:38): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203880138.445:39): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203880138.445:40): user pid=3244 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203880144.344:41): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203880144.347:42): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203880144.348:43): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203880144.349:44): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203880144.350:45): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203880426.828:46): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203880426.830:47): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203880426.830:48): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203880426.831:49): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203880426.831:50): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203880426.831:51): user pid=3615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kdelibs4" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203880446.154:52): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203880446.155:53): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203880446.155:54): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203880446.155:55): user pid=3632 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kdelibs4" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203880575.695:56): user pid=3762 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1203880581.384:57): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203880581.386:58): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203880581.387:59): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203880581.387:60): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203880581.387:61): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203880581.388:62): user pid=3770 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203880811.163:63): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203880811.165:64): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203880811.166:65): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203880811.166:66): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1203880811.166:67): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1203881215.730:68): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1203881215.733:69): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1203881215.734:70): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1203881215.734:71): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1203881215.734:72): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1203883261.888:73): user pid=26992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203883261.890:74): user pid=26992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203883261.890:75): login pid=26992 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203883261.913:76): user pid=26992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203883262.068:77): user pid=26992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203883262.069:78): user pid=26992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1203885313.345:79): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203885313.345:80): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203885320.075:81): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203885320.075:82): user pid=1276 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1203885320.108:83): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203885320.108:84): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203885574.364:85): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203885574.364:86): user pid=1301 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1203885880.432:87): avc:  denied  { getattr } for  pid=7354 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203885880.432:87): arch=c000003e syscall=6 success=yes exit=0 a0=60440b a1=7fff0c0e1a40 a2=7fff0c0e1a40 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203885880.432:88): avc:  denied  { search } for  pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203885880.432:88): arch=c000003e syscall=80 success=yes exit=0 a0=60440b a1=7fff0c0e1740 a2=0 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203885880.432:89): avc:  denied  { read } for  pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203885880.432:89): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203885880.442:90): avc:  denied  { getattr } for  pid=7354 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163791 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203885880.442:90): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff0c0e18b0 a2=7fff0c0e18b0 a3=3688d529f0 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203885880.442:91): avc:  denied  { setattr } for  pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203885880.442:91): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff0c0e1940 a2=3688d529d8 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203885880.442:92): avc:  denied  { rmdir } for  pid=7354 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203885880.442:92): arch=c000003e syscall=84 success=no exit=-39 a0=60440b a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203885880.566:93): avc:  denied  { getattr } for  pid=7354 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1203885880.566:93): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff0c0e18b0 a2=7fff0c0e18b0 a3=3688b22902 items=0 ppid=7352 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1203886861.190:94): user pid=8360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203886861.192:95): user pid=8360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203886861.192:96): login pid=8360 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203886861.237:97): user pid=8360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203886861.284:98): user pid=8360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203886861.285:99): user pid=8360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1203890230.753:100): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11092 comm="meinproc4" sig=4
>type=ANOM_ABEND msg=audit(1203890230.755:101): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11109 comm="meinproc4" sig=4
>type=ANOM_ABEND msg=audit(1203890234.434:102): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11107 comm="meinproc4" sig=4
>type=USER_ACCT msg=audit(1203890461.418:103): user pid=11484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203890461.419:104): user pid=11484 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203890461.419:105): login pid=11484 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203890461.681:106): user pid=11484 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203890461.900:107): user pid=11484 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203890461.901:108): user pid=11484 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1203891524.211:109): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=23787 comm="meinproc4" sig=4
>type=USER_AUTH msg=audit(1203892013.550:110): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1203892018.193:111): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1203892018.196:112): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1203892018.241:113): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1203892018.251:114): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1203892018.251:115): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1203892018.251:116): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1203892018.597:117): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1203892018.598:118): user pid=20273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1203892019.033:119): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1203892019.033:120): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203892019.034:121): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203892019.098:122): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1203892019.098:123): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203892019.098:124): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203892019.126:125): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203892019.127:126): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1203892019.126:127): avc:  denied  { unlink } for  pid=2769 comm="ssh-agent" name="agent.2768" dev=dm-0 ino=328048 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203892019.126:127): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff21bd6ce0 a2=7fff21bd6bb0 a3=0 items=0 ppid=1 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1203892031.419:8188): auditd normal halt, sending auid=4294967295 pid=20686 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1203954584.002:9479): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2063 res=success
>type=CONFIG_CHANGE msg=audit(1203954584.102:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203954584.102:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1203954584.400:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1203954584.400:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1203954585.316:8): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1203954585.316:9): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1203954586.807:10): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1203954586.808:11): user pid=2086 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1203954637.054:12): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203954637.057:13): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1203954637.100:14): avc:  denied  { create } for  pid=2760 comm="ssh-agent" name="agent.2760" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203954637.100:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff2dc16640 a2=6e a3=0 items=0 ppid=2651 pid=2760 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1203954637.101:15): avc:  denied  { write } for  pid=2651 comm="login" name="agent.2760" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203954637.101:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7ffffeda9120 a2=6e a3=0 items=0 ppid=1 pid=2651 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1203954637.102:16): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203954637.108:17): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1203954637.122:18): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203954647.458:19): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203954647.461:20): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203954647.462:21): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203954647.463:22): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203954647.463:23): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203954647.463:24): user pid=2889 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203954802.790:25): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1203954802.813:26): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1203954806.818:27): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203954806.821:28): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203954806.822:29): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203954806.822:30): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1203954806.822:31): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203955077.237:32): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203955077.240:33): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203955077.247:34): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203955077.247:35): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203955192.642:36): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203955192.643:37): user pid=4192 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203955262.013:38): user pid=6504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203955262.014:39): user pid=6504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203955262.014:40): login pid=6504 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203955262.027:41): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203955262.433:42): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203955262.434:43): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203955351.102:44): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203955351.105:45): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203955351.106:46): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203955351.106:47): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1203955351.106:48): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1203955840.686:49): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203955840.688:50): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203955840.739:51): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203955840.751:52): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203955840.751:53): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203955840.751:54): user pid=15303 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/kdelibs-4.0.1/x86_64-redhat-linux-gnu/bin" cmd="/bin/cp" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1203956382.660:55): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=25328 comm="meinproc4" sig=4
>type=ANOM_ABEND msg=audit(1203957122.906:56): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=3385 comm="meinproc4" sig=4
>type=USER_AUTH msg=audit(1203957290.103:57): user pid=3642 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_AUTH msg=audit(1203957300.394:58): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203957300.396:59): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203957300.397:60): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203957300.397:61): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203957300.397:62): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203957300.398:63): user pid=3656 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/kdelibs-4.0.1/x86_64-redhat-linux-gnu/bin" cmd="/bin/cp" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1203957579.970:64): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=6890 comm="meinproc4" sig=4
>type=ANOM_ABEND msg=audit(1203957693.080:65): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=8152 comm="meinproc4" sig=4
>type=USER_ACCT msg=audit(1203958861.736:66): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203958861.740:67): user pid=21610 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203958861.740:68): login pid=21610 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203958861.982:69): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203958862.351:70): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203958862.352:71): user pid=21610 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203959564.058:72): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1203959564.060:73): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1203959564.117:74): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1203959564.123:75): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1203959564.123:76): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1203959564.124:77): user pid=2296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=USER_START msg=audit(1203960235.848:78): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203960235.848:79): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203960244.073:80): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203960244.073:81): user pid=13234 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1203960244.098:82): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1203960244.098:83): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1203960502.298:84): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1203960502.299:85): user pid=13257 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1203961396.730:86): avc:  denied  { getattr } for  pid=452 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.730:86): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fff6e74b0b0 a2=7fff6e74b0b0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.730:87): avc:  denied  { search } for  pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.730:87): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fff6e74adb0 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.730:88): avc:  denied  { read } for  pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.730:88): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.739:89): avc:  denied  { getattr } for  pid=452 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163791 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1203961396.739:89): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff6e74af20 a2=7fff6e74af20 a3=3688d529f0 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.739:90): avc:  denied  { setattr } for  pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.739:90): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff6e74afb0 a2=3688d529d8 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.739:91): avc:  denied  { rmdir } for  pid=452 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.739:91): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.875:92): avc:  denied  { getattr } for  pid=452 comm="tmpwatch" path="/tmp/pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.875:92): arch=c000003e syscall=6 success=yes exit=0 a0=604533 a1=7fff6e74b0b0 a2=7fff6e74b0b0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.875:93): avc:  denied  { search } for  pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.875:93): arch=c000003e syscall=80 success=yes exit=0 a0=604533 a1=7fff6e74adb0 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.875:94): avc:  denied  { read } for  pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.875:94): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.888:95): avc:  denied  { getattr } for  pid=452 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1203961396.888:95): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff6e74af20 a2=7fff6e74af20 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.888:96): avc:  denied  { setattr } for  pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.888:96): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff6e74afb0 a2=3688d529d8 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1203961396.888:97): avc:  denied  { rmdir } for  pid=452 comm="tmpwatch" name="pulse-s4504kr" dev=dm-0 ino=163428 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1203961396.888:97): arch=c000003e syscall=84 success=no exit=-39 a0=604533 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=450 pid=452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1203962461.584:98): user pid=12665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203962461.586:99): user pid=12665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203962461.586:100): login pid=12665 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203962461.733:101): user pid=12665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203962461.933:102): user pid=12665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203962461.934:103): user pid=12665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203964696.420:104): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203964696.422:105): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203964696.479:106): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203964696.485:107): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203964696.485:108): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203964696.486:109): user pid=7109 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203964777.970:110): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203964777.970:111): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203964777.971:112): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203964777.971:113): user pid=7317 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203966061.180:114): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203966061.182:115): user pid=18404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203966061.182:116): login pid=18404 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203966061.274:117): user pid=18404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203966061.542:118): user pid=18404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203966061.543:119): user pid=18404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203966647.342:120): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203966647.344:121): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203966647.400:122): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203966647.406:123): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1203966839.912:124): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203966839.912:125): user pid=19035 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203969661.585:126): user pid=25335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203969661.587:127): user pid=25335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203969661.587:128): login pid=25335 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203969661.602:129): user pid=25335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203969661.627:130): user pid=25335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203969661.628:131): user pid=25335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203972517.778:132): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203972517.780:133): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203972517.829:134): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203972517.835:135): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203972517.835:136): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203972517.835:137): user pid=22448 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203973261.780:138): user pid=27112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203973261.782:139): user pid=27112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203973261.782:140): login pid=27112 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203973261.892:141): user pid=27112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203973262.211:142): user pid=27112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203973262.212:143): user pid=27112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1203975588.096:144): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203975588.099:145): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1203975588.164:146): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1203975588.170:147): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203975588.170:148): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1203975588.170:149): user pid=24635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1203976861.412:150): user pid=346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1203976861.414:151): user pid=346 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1203976861.414:152): login pid=346 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1203976861.545:153): user pid=346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203976861.857:154): user pid=346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1203976861.858:155): user pid=346 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1203979319.334:156): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1203979319.385:157): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1203979329.344:158): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203979329.346:159): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1203979329.347:160): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1203979329.376:161): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203979329.376:162): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1203979329.377:163): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1203979329.661:164): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1203979329.661:165): user pid=13777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203979330.102:166): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1203979330.104:167): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1203979330.150:168): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1203979330.184:169): avc:  denied  { unlink } for  pid=2761 comm="ssh-agent" name="agent.2760" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=USER_END msg=audit(1203979330.198:170): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=SYSCALL msg=audit(1203979330.184:169): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff2dc15e50 a2=7fff2dc15d20 a3=0 items=0 ppid=1 pid=2761 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1203979351.043:9480): auditd normal halt, sending auid=4294967295 pid=14198 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204037966.317:8142): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2073 res=success
>type=CONFIG_CHANGE msg=audit(1204037966.417:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204037966.417:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204037966.756:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204037966.756:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204037967.614:8): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204037967.614:9): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204037969.462:10): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204037969.463:11): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204037987.915:12): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204037987.918:13): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204037987.961:14): avc:  denied  { create } for  pid=2769 comm="ssh-agent" name="agent.2769" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204037987.961:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff998090e0 a2=6e a3=0 items=0 ppid=2661 pid=2769 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204037987.976:15): avc:  denied  { write } for  pid=2661 comm="login" name="agent.2769" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204037987.976:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffc1fab320 a2=6e a3=0 items=0 ppid=1 pid=2661 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1204037987.976:16): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204037987.985:17): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204037987.999:18): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204037997.787:19): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204037997.790:20): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204037997.791:21): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204037997.792:22): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204037997.792:23): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204037997.792:24): user pid=2898 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204038061.586:25): user pid=3019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204038061.587:26): user pid=3019 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204038061.587:27): login pid=3019 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204038061.602:28): user pid=3019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204038061.889:29): user pid=3019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204038061.890:30): user pid=3019 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204038090.542:31): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204038090.542:32): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204038090.543:33): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204038090.543:34): user pid=3054 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204038095.817:35): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204038095.820:36): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204038095.821:37): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204038095.821:38): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204038095.822:39): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204038162.086:40): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204038162.087:41): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204038162.087:42): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204038162.088:43): user pid=3292 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204038270.849:44): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204038270.849:45): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204038270.850:46): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204038270.850:47): user pid=7173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204038319.126:48): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_ACCT msg=audit(1204038319.129:49): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_START msg=audit(1204038319.130:50): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=CRED_ACQ msg=audit(1204038319.130:51): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_LOGIN msg=audit(1204038319.130:52): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=CRED_ACQ msg=audit(1204038486.755:53): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204038486.756:54): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204038486.757:55): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204038486.757:56): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204038517.858:57): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204038517.860:58): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204038517.867:59): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204038517.867:60): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204038612.414:61): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204038612.415:62): user pid=11967 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204041662.238:63): user pid=10479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204041662.239:64): user pid=10479 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204041662.240:65): login pid=10479 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204041662.569:66): user pid=10479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204041663.085:67): user pid=10479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204041663.086:68): user pid=10479 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204042177.660:69): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204042177.663:70): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204042177.736:71): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204042177.742:72): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204042177.742:73): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204042177.743:74): user pid=22490 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=16 cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204042379.565:75): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204042379.566:76): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204042379.566:77): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204042379.567:78): user pid=22737 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204042419.885:79): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204042419.886:80): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204042419.886:81): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204042419.886:82): user pid=22777 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_START msg=audit(1204043574.690:83): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204043574.690:84): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1204043581.977:85): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1204043581.978:86): user pid=12207 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1204043582.143:87): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204043582.143:88): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1204043831.322:89): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1204043831.322:90): user pid=12232 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1204044068.906:91): avc:  denied  { getattr } for  pid=13037 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204044068.906:91): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fffe59cf330 a2=7fffe59cf330 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204044068.906:92): avc:  denied  { search } for  pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204044068.906:92): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fffe59cf030 a2=0 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204044068.906:93): avc:  denied  { read } for  pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204044068.906:93): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204044068.915:94): avc:  denied  { getattr } for  pid=13037 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163791 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204044068.915:94): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fffe59cf1a0 a2=7fffe59cf1a0 a3=3688d529f0 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204044068.915:95): avc:  denied  { setattr } for  pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204044068.915:95): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fffe59cf230 a2=3688d529d8 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204044068.915:96): avc:  denied  { rmdir } for  pid=13037 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204044068.915:96): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204044069.014:97): avc:  denied  { getattr } for  pid=13037 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1204044069.014:97): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fffe59cf1a0 a2=7fffe59cf1a0 a3=3688b22902 items=0 ppid=13035 pid=13037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1204045261.363:98): user pid=25834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204045261.365:99): user pid=25834 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204045261.365:100): login pid=25834 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204045261.482:101): user pid=25834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204045261.671:102): user pid=25834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204045261.672:103): user pid=25834 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204046501.160:104): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204046501.163:105): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204046501.203:106): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204046501.209:107): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204046501.209:108): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204046501.209:109): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/SPECS" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204046501.353:110): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204046501.353:111): user pid=5538 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204046501.597:112): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=CRED_DISP msg=audit(1204046501.597:113): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204046501.610:114): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204046501.616:115): user pid=2665 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_END msg=audit(1204046501.617:116): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204046501.617:117): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204046501.617:118): avc:  denied  { unlink } for  pid=2770 comm="ssh-agent" name="agent.2769" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204046501.617:118): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff998088f0 a2=7fff998087c0 a3=0 items=0 ppid=1 pid=2770 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1204046519.161:8143): auditd normal halt, sending auid=4294967295 pid=5956 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204063320.622:4318): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2071 res=success
>type=CONFIG_CHANGE msg=audit(1204063320.722:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204063320.722:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204063321.310:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204063321.310:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204063322.334:8): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1204063322.334:9): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1204063323.957:10): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1204063323.958:11): user pid=2094 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1204063389.878:12): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1204063389.881:13): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1204063389.964:14): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1204063390.107:15): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1204063402.820:16): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1204063402.852:17): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204063406.304:18): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204063406.307:19): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204063406.308:20): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204063406.308:21): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204063406.309:22): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204063429.841:23): avc:  denied  { execheap } for  pid=3407 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204063429.841:23): arch=c000003e syscall=10 success=yes exit=0 a0=f01000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3407 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204064851.060:24): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204064851.063:25): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204064851.143:26): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204064851.143:27): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204064851.209:28): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204065180.022:29): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204065180.022:30): user pid=2847 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/bin/kdm" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204065180.660:31): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204065180.661:32): user pid=2792 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204065180.662:33): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1204065180.662:34): avc:  denied  { signal } for  pid=2793 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204065180.662:34): arch=c000003e syscall=62 success=yes exit=0 a0=b33 a1=f a2=b33 a3=0 items=0 ppid=1 pid=2793 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1204065180.663:35): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1204065190.892:4319): auditd normal halt, sending auid=4294967295 pid=26998 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204129083.936:8788): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2070 res=success
>type=CONFIG_CHANGE msg=audit(1204129084.036:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204129084.036:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204129084.565:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204129084.565:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204129085.424:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204129085.424:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204129087.230:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204129087.231:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204129103.900:12): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204129103.903:13): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204129103.946:14): avc:  denied  { create } for  pid=2767 comm="ssh-agent" name="agent.2767" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204129103.946:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff097d2bf0 a2=6e a3=0 items=0 ppid=2658 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204129103.961:15): avc:  denied  { write } for  pid=2658 comm="login" name="agent.2767" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204129103.961:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffadbe8f60 a2=6e a3=0 items=0 ppid=1 pid=2658 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1204129103.961:16): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204129103.970:17): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204129103.984:18): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204129111.550:19): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204129111.552:20): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204129111.554:21): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204129111.555:22): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204129111.555:23): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204129111.555:24): user pid=2896 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204129182.223:25): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204129182.224:26): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204129182.224:27): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204129182.224:28): user pid=3018 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204129188.699:29): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204129188.701:30): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204129188.702:31): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204129188.702:32): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204129188.702:33): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204129411.727:34): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204129411.728:35): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204129411.728:36): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204129411.728:37): user pid=8470 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204129446.380:38): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204129446.381:39): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204129446.381:40): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204129446.381:41): user pid=9503 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd="/usr/bin/emacs" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204129459.522:42): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204129459.523:43): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204129459.523:44): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204129459.523:45): user pid=9923 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204129532.671:46): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204129532.674:47): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=AVC msg=audit(1204129532.691:48): avc:  denied  { create } for  pid=10977 comm="ssh-agent" name="agent.10977" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204129532.691:48): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffb2888580 a2=6e a3=0 items=0 ppid=2660 pid=10977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204129532.695:49): avc:  denied  { write } for  pid=2660 comm="login" name="agent.10977" dev=dm-0 ino=329657 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204129532.695:49): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffb83466c0 a2=6e a3=0 items=0 ppid=1 pid=2660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty3 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1204129532.695:50): login pid=2660 uid=0 old auid=4294967295 new auid=0
>type=USER_ROLE_CHANGE msg=audit(1204129532.705:51): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204129532.713:52): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204129532.713:53): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1204129532.717:54): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1204129885.997:55): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1204129885.999:56): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1204129886.121:57): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1204129886.121:58): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1204129886.319:59): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=ANOM_ABEND msg=audit(1204130057.014:60): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=17994 comm="pulseaudio" sig=6
>type=USER_AUTH msg=audit(1204130832.522:61): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204130832.525:62): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204130832.587:63): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204130832.596:64): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204130832.596:65): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204130832.596:66): user pid=385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204130913.115:67): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204130913.116:68): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204130913.116:69): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204130913.117:70): user pid=459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204131661.842:71): user pid=13943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204131661.843:72): user pid=13943 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204131661.843:73): login pid=13943 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204131661.930:74): user pid=13943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204131662.630:75): user pid=13943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204131662.632:76): user pid=13943 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1204131662.694:77): avc:  denied  { unlink } for  pid=10978 comm="ssh-agent" name="agent.10977" dev=dm-0 ino=329657 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204131662.694:77): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffb2887d90 a2=7fffb2887c60 a3=0 items=0 ppid=1 pid=10978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1204131781.670:78): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204131781.721:79): user pid=2660 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1204131787.291:80): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204131787.293:81): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204131787.303:82): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204131787.303:83): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1204131787.304:84): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1204131927.020:85): user pid=21999 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1204131927.020:86): user pid=21999 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1204131927.021:87): user pid=21999 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=failed)'
>type=USER_AUTH msg=audit(1204131933.576:88): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1204131933.578:89): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1204131933.594:90): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1204131933.595:91): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1204131933.595:92): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_CMD msg=audit(1204131933.596:93): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty6 res=success)'
>type=USER_AUTH msg=audit(1204131933.603:94): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1204131933.603:95): user pid=22006 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_DISP msg=audit(1204131933.780:96): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204131933.781:97): user pid=21696 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1204131933.932:98): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204131934.023:99): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204131934.108:100): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204131934.155:101): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204131934.197:102): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1204131934.223:103): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1204131934.353:104): avc:  denied  { unlink } for  pid=2768 comm="ssh-agent" name="agent.2767" dev=dm-0 ino=328124 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204131934.353:104): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff097d2400 a2=7fff097d22d0 a3=0 items=0 ppid=1 pid=2768 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1204131949.758:8789): auditd normal halt, sending auid=4294967295 pid=22413 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204132034.340:4836): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2064 res=success
>type=CONFIG_CHANGE msg=audit(1204132034.439:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204132034.439:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204132035.102:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204132035.102:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204132036.126:8): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1204132036.126:9): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1204132037.592:10): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1204132037.592:11): user pid=2087 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1204132142.920:12): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1204132142.924:13): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1204132142.925:14): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1204132142.984:15): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1204132142.985:16): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1204132181.232:17): avc:  denied  { execheap } for  pid=3414 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204132181.232:17): arch=c000003e syscall=10 success=yes exit=0 a0=f01000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3414 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204132216.597:18): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204132216.599:19): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204132216.601:20): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204132216.601:21): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204132216.601:22): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204132251.203:23): avc:  denied  { execheap } for  pid=4020 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204132251.203:23): arch=c000003e syscall=10 success=yes exit=0 a0=10fe000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=4020 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204132970.863:24): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_LOGIN msg=audit(1204132970.874:25): user pid=2789 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)'
>type=USER_END msg=audit(1204133574.452:26): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204133574.540:27): user pid=2940 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1204133614.391:28): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1204133614.391:29): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1204133625.050:30): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1204133625.055:31): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1204133625.055:32): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1204133625.087:33): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1204133625.087:34): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1204133629.988:35): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=20048 comm="pulseaudio" sig=6
>type=AVC msg=audit(1204133666.969:36): avc:  denied  { execheap } for  pid=20318 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204133666.969:36): arch=c000003e syscall=10 success=yes exit=0 a0=f08000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=20318 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204133868.425:37): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204133868.428:38): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204133868.429:39): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204133868.429:40): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204133868.429:41): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1204133884.132:42): avc:  denied  { execheap } for  pid=20318 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204133884.132:42): arch=c000003e syscall=10 success=yes exit=0 a0=fde000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=20318 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204133922.405:43): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204133922.407:44): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204133922.408:45): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204133922.409:46): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204133922.409:47): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204133922.409:48): user pid=31297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/redhat/RPMS/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204135261.668:49): user pid=10992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204135261.670:50): user pid=10992 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204135261.670:51): login pid=10992 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204135261.797:52): user pid=10992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204135262.124:53): user pid=10992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204135262.125:54): user pid=10992 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204136510.426:55): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204136510.435:56): user pid=19410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204136510.783:57): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204136510.784:58): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1204136510.800:59): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204136510.805:60): avc:  denied  { signal } for  pid=2788 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204136510.805:60): arch=c000003e syscall=62 success=yes exit=0 a0=be3 a1=f a2=be3 a3=0 items=0 ppid=1 pid=2788 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1204136511.062:61): user pid=2788 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204136512.564:62): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2796 comm="gdm-binary" sig=11
>type=DAEMON_END msg=audit(1204136527.586:4837): auditd normal halt, sending auid=4294967295 pid=13048 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204136608.143:1194): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2070 res=success
>type=CONFIG_CHANGE msg=audit(1204136608.243:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204136608.243:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204136608.955:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204136608.955:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204136610.038:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204136610.038:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204136611.330:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204136611.330:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204136629.169:12): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204136629.171:13): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204136629.215:14): avc:  denied  { create } for  pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204136629.215:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff8550a780 a2=6e a3=0 items=0 ppid=2658 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204136629.216:15): avc:  denied  { write } for  pid=2658 comm="login" name="agent.2766" dev=dm-0 ino=327517 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204136629.216:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffe94ba830 a2=6e a3=0 items=0 ppid=1 pid=2658 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1204136629.217:16): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204136629.226:17): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204136629.237:18): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204136665.476:19): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204136665.479:20): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204136665.479:21): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204136665.481:22): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204136665.481:23): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204136665.481:24): user pid=2913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204136697.194:25): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204136697.197:26): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204136697.198:27): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204136697.199:28): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204136697.199:29): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1204136909.179:30): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=3377 comm="klauncher" sig=6
>type=CRED_ACQ msg=audit(1204136921.849:31): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204136921.851:32): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204136921.851:33): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204136921.851:34): user pid=4077 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204136945.355:35): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204136945.355:36): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204136945.355:37): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204136945.356:38): user pid=4091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204136953.235:39): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204136953.236:40): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204136953.236:41): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204136953.236:42): user pid=4098 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase-workspace/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204137019.263:43): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=4152 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204137019.321:44): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4287 comm="klauncher" sig=6
>type=ANOM_ABEND msg=audit(1204137035.062:45): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=4431 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204137035.124:46): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4563 comm="klauncher" sig=6
>type=ANOM_ABEND msg=audit(1204137071.058:47): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=4743 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204137071.088:48): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4873 comm="klauncher" sig=6
>type=USER_AUTH msg=audit(1204137599.351:49): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204137599.353:50): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204137599.353:51): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204137599.354:52): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204137599.354:53): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204137599.354:54): user pid=13153 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204137621.812:55): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204137621.813:56): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204137621.813:57): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204137621.813:58): user pid=13176 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204137640.158:59): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204137640.159:60): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204137640.159:61): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204137640.159:62): user pid=13189 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204137720.167:63): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=13384 comm="klauncher" sig=6
>type=USER_AUTH msg=audit(1204137980.004:64): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204137980.007:65): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204137980.007:66): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204137980.008:67): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204137980.008:68): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204137980.009:69): user pid=14281 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204138198.150:70): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204138198.151:71): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204138198.151:72): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204138198.152:73): user pid=10700 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204138233.451:74): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204138233.452:75): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204138233.452:76): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204138233.452:77): user pid=10720 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204138245.159:78): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204138245.160:79): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204138245.160:80): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204138245.160:81): user pid=10780 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204138253.965:82): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204138253.966:83): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204138253.966:84): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204138253.967:85): user pid=10787 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204138330.098:86): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204138330.099:87): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204138330.099:88): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204138330.099:89): user pid=10921 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/arts/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204138510.833:90): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_ACCT msg=audit(1204138510.835:91): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_START msg=audit(1204138510.836:92): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=CRED_ACQ msg=audit(1204138510.837:93): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_LOGIN msg=audit(1204138510.837:94): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=ANOM_ABEND msg=audit(1204138709.217:95): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4719 comm="klauncher" sig=6
>type=USER_ACCT msg=audit(1204138861.589:96): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204138861.591:97): user pid=24636 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204138861.591:98): login pid=24636 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204138861.639:99): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204138861.917:100): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204138861.918:101): user pid=24636 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204140117.318:102): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204140117.321:103): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204140117.321:104): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204140117.323:105): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204140117.323:106): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204140117.323:107): user pid=29939 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs3/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204140228.538:108): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204140228.538:109): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204140228.539:110): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204140228.539:111): user pid=30073 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204140357.148:112): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204140357.151:113): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204140357.163:114): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140357.164:115): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140357.164:116): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140357.164:117): user pid=30615 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204140377.768:118): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140377.769:119): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140377.769:120): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140377.769:121): user pid=30635 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1204140469.802:122): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=30242 comm="klauncher" sig=6
>type=CRED_ACQ msg=audit(1204140590.213:123): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140590.214:124): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140590.214:125): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140590.215:126): user pid=31017 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204140596.531:127): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140596.532:128): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140596.532:129): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140596.532:130): user pid=31024 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204140654.888:131): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140654.888:132): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140654.888:133): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140654.889:134): user pid=32302 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204140847.199:135): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140847.200:136): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140847.200:137): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140847.200:138): user pid=13786 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204140861.752:139): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204140861.754:140): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204140861.763:141): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204140861.763:142): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1204140861.763:143): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204140929.055:144): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204140929.056:145): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204140929.056:146): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204140929.056:147): user pid=13969 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204141738.314:148): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_ACCT msg=audit(1204141738.317:149): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_START msg=audit(1204141738.318:150): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=CRED_ACQ msg=audit(1204141738.318:151): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_LOGIN msg=audit(1204141738.319:152): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=ANOM_ABEND msg=audit(1204141988.422:153): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=23098 comm="klauncher" sig=6
>type=USER_ACCT msg=audit(1204142461.277:154): user pid=30090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204142461.278:155): user pid=30090 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204142461.278:156): login pid=30090 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204142461.364:157): user pid=30090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204142461.593:158): user pid=30090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204142461.594:159): user pid=30090 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1204142551.948:160): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204142551.948:161): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1204142612.788:162): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1204142612.788:163): user pid=30536 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1204142613.648:164): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204142613.648:165): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1204142915.365:166): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204142915.368:167): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204142915.389:168): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204142915.390:169): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204142915.390:170): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204142915.391:171): user pid=9214 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143017.515:172): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143017.516:173): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143017.516:174): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143017.517:175): user pid=9286 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143124.814:176): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143124.814:177): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143124.814:178): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143124.815:179): user pid=9368 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1204143131.920:180): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1204143131.921:181): user pid=30857 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204143140.251:182): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143140.252:183): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143140.252:184): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143140.252:185): user pid=10922 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143151.286:186): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143151.286:187): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143151.287:188): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143151.287:189): user pid=14366 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143160.611:190): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143160.612:191): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143160.612:192): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143160.613:193): user pid=17091 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143169.367:194): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143169.368:195): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143169.368:196): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143169.369:197): user pid=18355 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143212.242:198): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143212.243:199): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143212.243:200): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143212.243:201): user pid=18418 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143226.822:202): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143226.823:203): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143226.823:204): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143226.823:205): user pid=18426 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143235.065:206): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143235.066:207): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143235.066:208): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143235.066:209): user pid=18434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204143266.362:210): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143266.363:211): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143266.363:212): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143266.363:213): user pid=18453 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204143420.866:214): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204143420.869:215): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204143420.870:216): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204143420.871:217): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204143420.871:218): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204143420.872:219): user pid=19536 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs3/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204143565.116:220): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204143565.117:221): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204143565.117:222): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204143565.118:223): user pid=20084 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=AVC msg=audit(1204143648.285:224): avc:  denied  { getattr } for  pid=21229 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204143648.285:224): arch=c000003e syscall=6 success=yes exit=0 a0=6043e3 a1=7fff54ab9420 a2=7fff54ab9420 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204143648.285:225): avc:  denied  { search } for  pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204143648.285:225): arch=c000003e syscall=80 success=yes exit=0 a0=6043e3 a1=7fff54ab9120 a2=0 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204143648.285:226): avc:  denied  { read } for  pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204143648.285:226): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204143648.294:227): avc:  denied  { getattr } for  pid=21229 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163383 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204143648.294:227): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff54ab9290 a2=7fff54ab9290 a3=3688d529f0 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204143648.294:228): avc:  denied  { setattr } for  pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204143648.294:228): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff54ab9320 a2=3688d529d8 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204143648.295:229): avc:  denied  { rmdir } for  pid=21229 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204143648.295:229): arch=c000003e syscall=84 success=no exit=-39 a0=6043e3 a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204143648.410:230): avc:  denied  { getattr } for  pid=21229 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1204143648.410:230): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff54ab9290 a2=7fff54ab9290 a3=3688b22902 items=0 ppid=21227 pid=21229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1204143812.490:231): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=21561 comm="klauncher" sig=11
>type=ANOM_ABEND msg=audit(1204143962.096:232): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=24917 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204143962.169:233): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=25093 comm="klauncher" sig=11
>type=ANOM_ABEND msg=audit(1204143962.257:234): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=25294 comm="gpg" sig=11
>type=USER_AUTH msg=audit(1204144061.884:235): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204144065.412:236): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204144065.414:237): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204144065.423:238): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204144065.437:239): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204144065.437:240): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204144065.437:241): user pid=30579 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames3/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204144803.653:242): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204144803.655:243): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204144803.681:244): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204144803.709:245): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204144803.709:246): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204144803.709:247): user pid=7964 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204144876.125:248): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204144876.125:249): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204144876.126:250): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204144876.126:251): user pid=9437 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdeartwork/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204145082.705:252): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204145082.707:253): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204145082.707:254): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204145082.708:255): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204145082.708:256): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204145082.709:257): user pid=20173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdebase3/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1204145464.304:258): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=20594 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204145464.330:259): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=20724 comm="klauncher" sig=11
>type=USER_AUTH msg=audit(1204145529.293:260): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204145529.295:261): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204145529.302:262): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204145529.303:263): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204145529.303:264): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1204145529.304:265): user pid=21385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty3 res=success)'
>type=ANOM_ABEND msg=audit(1204145559.009:266): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=21443 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204145559.045:267): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=21573 comm="klauncher" sig=11
>type=USER_AUTH msg=audit(1204145601.045:268): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204145601.048:269): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204145601.048:270): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204145601.049:271): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204145601.049:272): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204145601.049:273): user pid=22099 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames/devel" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204145692.226:274): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=24072 comm="thunderbird-bin" sig=6
>type=ANOM_ABEND msg=audit(1204145823.331:275): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=23461 comm="klauncher" sig=11
>type=USER_ACCT msg=audit(1204146061.748:276): user pid=30771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204146061.749:277): user pid=30771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204146061.749:278): login pid=30771 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204146061.823:279): user pid=30771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204146062.052:280): user pid=30771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204146062.053:281): user pid=30771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204146553.461:282): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204146553.463:283): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204146553.464:284): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204146553.465:285): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204146553.465:286): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204146553.466:287): user pid=6066 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames/devel/x86_64" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204146773.429:288): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=6273 comm="klauncher" sig=11
>type=USER_AUTH msg=audit(1204146846.734:289): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204146846.734:290): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204146846.734:291): user pid=7006 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=CRED_ACQ msg=audit(1204146849.751:292): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204146849.752:293): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204146849.752:294): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204146849.752:295): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdegames/devel/x86_64" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204146849.759:296): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204146849.759:297): user pid=7007 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204146849.874:298): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204146849.877:299): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1204146849.878:300): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1204146849.878:301): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=USER_END msg=audit(1204146849.887:302): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204146849.888:303): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204146849.889:304): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1204146849.889:305): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=USER_END msg=audit(1204146849.890:306): user pid=2663 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty6 res=success)'
>type=AVC msg=audit(1204146849.890:307): avc:  denied  { unlink } for  pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=327517 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=USER_END msg=audit(1204146849.891:308): user pid=2662 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty5 res=success)'
>type=SYSCALL msg=audit(1204146849.890:307): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff85509f90 a2=7fff85509e60 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1204146861.561:1195): auditd normal halt, sending auid=4294967295 pid=7416 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204146938.597:6937): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2066 res=success
>type=CONFIG_CHANGE msg=audit(1204146938.697:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204146938.697:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204146939.159:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204146939.159:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204146940.199:8): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204146940.199:9): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204146941.790:10): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204146941.790:11): user pid=2089 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204146958.543:12): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204146958.545:13): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204146958.588:14): avc:  denied  { create } for  pid=2753 comm="ssh-agent" name="agent.2753" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204146958.588:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff29c994f0 a2=6e a3=0 items=0 ppid=2645 pid=2753 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204146958.590:15): avc:  denied  { write } for  pid=2645 comm="login" name="agent.2753" dev=dm-0 ino=435179 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204146958.590:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff07089400 a2=6e a3=0 items=0 ppid=1 pid=2645 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1204146958.590:16): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204146958.600:17): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204146958.611:18): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204147273.276:19): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204147273.278:20): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147273.279:21): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147273.281:22): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147273.281:23): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147273.281:24): user pid=3103 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204147321.376:25): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204147321.379:26): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204147321.380:27): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204147321.380:28): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204147321.380:29): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204147413.947:30): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147413.948:31): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147413.948:32): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147413.948:33): user pid=3337 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147426.346:34): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147426.346:35): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147426.346:36): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147426.347:37): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147432.755:38): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147432.756:39): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147432.756:40): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147432.756:41): user pid=3345 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147489.745:42): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147489.746:43): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147489.746:44): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147489.747:45): user pid=3385 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147523.223:46): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147523.223:47): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147523.223:48): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147523.224:49): user pid=3409 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147550.272:50): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147550.272:51): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147550.272:52): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147550.273:53): user pid=3485 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147654.471:54): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147654.472:55): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147654.472:56): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147654.472:57): user pid=3553 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147676.936:58): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147676.937:59): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147676.937:60): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147676.937:61): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147683.108:62): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147683.109:63): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147683.109:64): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147683.109:65): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147699.294:66): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147699.294:67): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147699.294:68): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147699.295:69): user pid=3582 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204147729.784:70): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204147729.784:71): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204147729.784:72): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204147729.785:73): user pid=3601 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148008.149:74): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148008.150:75): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148008.150:76): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148008.151:77): user pid=4015 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148050.876:78): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148050.876:79): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148050.876:80): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148050.877:81): user pid=4096 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148079.227:82): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148079.228:83): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148079.228:84): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148079.228:85): user pid=4118 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148107.193:86): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148107.193:87): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148107.193:88): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148107.194:89): user pid=4150 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148141.408:90): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148141.409:91): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148141.409:92): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148141.409:93): user pid=4173 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148149.656:94): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148149.657:95): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148149.657:96): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148149.657:97): user pid=4180 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148208.678:98): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148208.679:99): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148208.679:100): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148208.679:101): user pid=4225 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148255.689:102): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148255.689:103): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148255.689:104): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148255.690:105): user pid=4284 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148317.638:106): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148317.639:107): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148317.639:108): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148317.640:109): user pid=4325 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148330.074:110): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148330.075:111): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148330.075:112): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148330.075:113): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148344.852:114): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148344.853:115): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148344.853:116): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148344.853:117): user pid=4420 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148357.531:118): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148357.532:119): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148357.532:120): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148357.533:121): user pid=4488 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148481.955:122): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148481.956:123): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148481.956:124): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148481.957:125): user pid=5296 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148489.200:126): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148489.201:127): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148489.201:128): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148489.202:129): user pid=5297 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148498.502:130): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148498.503:131): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148498.503:132): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148498.503:133): user pid=5304 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148505.302:134): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148505.302:135): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148505.302:136): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148505.303:137): user pid=5313 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/kde3" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204148514.131:138): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=5332 comm="X" sig=6
>type=CRED_ACQ msg=audit(1204148607.136:139): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148607.137:140): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148607.137:141): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148607.137:142): user pid=6013 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204148644.241:143): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204148644.242:144): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204148644.242:145): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204148644.242:146): user pid=6049 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204148741.916:147): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=6178 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204148798.097:148): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=6865 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204148798.138:149): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=7080 comm="gpg" sig=11
>type=USER_AUTH msg=audit(1204148894.856:150): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204148894.859:151): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204148894.860:152): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204148894.861:153): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204148894.861:154): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204148894.861:155): user pid=7586 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd="/bin/chmod" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204149013.665:156): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204149013.667:157): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149013.668:158): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149013.668:159): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149013.669:160): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149013.669:161): user pid=8400 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/emacs" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149054.769:162): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149054.770:163): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149054.770:164): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149054.770:165): user pid=8434 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149072.486:166): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204149072.487:167): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204149072.487:168): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204149072.488:169): user pid=8450 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204149091.977:170): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204149091.978:171): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204149091.978:172): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204149091.978:173): user pid=8516 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204149661.758:174): user pid=10589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204149661.759:175): user pid=10589 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204149661.759:176): login pid=10589 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204149661.784:177): user pid=10589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204149661.896:178): user pid=10589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204149661.897:179): user pid=10589 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204149730.091:180): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204149730.093:181): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149730.094:182): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149730.095:183): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149730.095:184): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149730.096:185): user pid=10711 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1204149763.640:186): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=10852 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204149775.731:187): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=11474 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204149816.240:188): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=12744 comm="thunderbird-bin" sig=6
>type=ANOM_ABEND msg=audit(1204149816.309:189): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=12752 comm="firefox-bin" sig=6
>type=USER_AUTH msg=audit(1204149870.546:190): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204149870.546:191): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204149870.568:192): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204149874.562:193): user pid=12800 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1204149910.133:194): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=12895 comm="X" sig=6
>type=CRED_ACQ msg=audit(1204149926.883:195): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149926.884:196): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149926.884:197): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149926.885:198): user pid=13507 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149963.005:199): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149963.005:200): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149963.006:201): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149963.006:202): user pid=13535 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149970.503:203): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149970.504:204): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149970.504:205): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149970.505:206): user pid=13542 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149981.472:207): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149981.473:208): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149981.473:209): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149981.474:210): user pid=13550 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204149988.563:211): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204149988.563:212): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204149988.564:213): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204149988.564:214): user pid=13560 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/bin/rpm" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204150362.763:215): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204150362.765:216): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204150362.766:217): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204150362.767:218): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204150362.767:219): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204150362.767:220): user pid=14712 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204150433.787:221): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1204150433.790:222): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1204150433.791:223): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1204150433.792:224): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1204150433.792:225): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1204150433.792:226): user pid=15459 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1204150577.161:227): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1204150577.162:228): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1204150577.163:229): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1204150577.163:230): user pid=16498 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1204150648.294:231): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1204150648.295:232): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1204150648.295:233): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1204150648.296:234): user pid=16706 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1204150880.735:235): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1204150880.736:236): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1204150880.736:237): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CMD msg=audit(1204150880.737:238): user pid=17928 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1204152322.127:239): user pid=20050 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204152322.127:240): user pid=20050 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204152322.128:241): user pid=20050 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204152327.694:242): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204152327.697:243): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204152327.697:244): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204152327.698:245): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204152327.699:246): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204152327.699:247): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/rc.d/init.d" cmd="/usr/bin/poweroff" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204152327.705:248): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204152327.706:249): user pid=20057 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204152327.778:250): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204152327.779:251): user pid=2645 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204152327.781:252): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204152327.782:253): user pid=2646 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1204152327.782:254): avc:  denied  { unlink } for  pid=2754 comm="ssh-agent" name="agent.2753" dev=dm-0 ino=435179 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204152327.782:254): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff29c98d00 a2=7fff29c98bd0 a3=0 items=0 ppid=1 pid=2754 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1204152335.876:6938): auditd normal halt, sending auid=4294967295 pid=20465 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204216330.919:9155): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2070 res=success
>type=CONFIG_CHANGE msg=audit(1204216331.019:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204216331.019:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204216331.607:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204216331.607:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204216332.648:8): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204216332.648:9): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204216334.189:10): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204216334.189:11): user pid=2093 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204216357.327:12): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204216357.330:13): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204216357.373:14): avc:  denied  { create } for  pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204216357.373:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fff5ec5a9f0 a2=6e a3=0 items=0 ppid=2658 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204216357.374:15): avc:  denied  { write } for  pid=2658 comm="login" name="agent.2766" dev=dm-0 ino=328035 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204216357.374:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff1ef1a290 a2=6e a3=0 items=0 ppid=1 pid=2658 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1204216357.375:16): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204216357.384:17): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204216357.395:18): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204216367.338:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204216367.340:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204216367.499:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204216367.500:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204216367.500:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204216367.501:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204216840.634:25): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204216840.636:26): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204216840.638:27): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204216840.638:28): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204216840.638:29): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204216890.358:30): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204216890.360:31): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204216890.361:32): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204216890.362:33): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204216890.362:34): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204216890.363:35): user pid=4376 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1204217108.493:36): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4671 comm="a+" sig=6
>type=ANOM_ABEND msg=audit(1204217113.917:37): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4673 comm="a+" sig=6
>type=ANOM_ABEND msg=audit(1204217122.130:38): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4681 comm="a+" sig=6
>type=ANOM_ABEND msg=audit(1204217134.670:39): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=5059 comm="a+" sig=6
>type=USER_AUTH msg=audit(1204217357.360:40): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204217357.362:41): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204217357.364:42): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204217357.364:43): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1204217357.364:44): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1204217369.285:45): user pid=19001 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_AUTH msg=audit(1204217375.591:46): user pid=30196 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=failed)'
>type=USER_AUTH msg=audit(1204217382.650:47): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204217382.652:48): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204217382.676:49): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204217382.678:50): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1204217453.802:51): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204217453.803:52): user pid=14619 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=ANOM_ABEND msg=audit(1204217511.485:53): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=2962 comm="X" sig=6
>type=ANOM_ABEND msg=audit(1204217536.542:54): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=11280 comm="X" sig=6
>type=USER_AUTH msg=audit(1204217565.196:55): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204217565.198:56): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204217565.199:57): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204217565.200:58): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204217565.200:59): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204217565.200:60): user pid=28913 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204217940.986:61): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204217940.989:62): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204217940.989:63): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204217940.990:64): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204217940.990:65): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204217940.991:66): user pid=29578 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204218061.146:67): user pid=30395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204218061.148:68): user pid=30395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204218061.148:69): login pid=30395 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204218061.161:70): user pid=30395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204218061.344:71): user pid=30395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204218061.345:72): user pid=30395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204218117.690:73): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204218117.693:74): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204218117.693:75): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204218117.694:76): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204218117.694:77): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204218117.694:78): user pid=30463 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204218131.127:79): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204218131.128:80): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204218131.128:81): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204218131.128:82): user pid=30479 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204218204.890:83): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204218204.891:84): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204218204.891:85): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204218204.891:86): user pid=30577 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204218266.540:87): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204218266.541:88): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204218266.541:89): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204218266.541:90): user pid=30690 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1204218605.910:91): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=31029 comm="a+" sig=6
>type=ANOM_ABEND msg=audit(1204218708.229:92): auid=4294967295 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=31123 comm="a+" sig=6
>type=USER_AUTH msg=audit(1204220773.088:93): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1204220773.091:94): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1204220773.120:95): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1204220773.137:96): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1204220773.137:97): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1204220773.137:98): user pid=6166 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1204220883.957:99): user pid=15254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="tauch" (terminal=pts/0 res=failed)'
>type=CRED_ACQ msg=audit(1204220898.991:100): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1204220898.997:101): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1204220899.000:102): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_CMD msg=audit(1204220899.000:103): user pid=18051 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/bin/touch" (terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1204221105.130:104): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204221105.133:105): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204221105.133:106): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204221105.134:107): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204221105.134:108): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204221105.135:109): user pid=13016 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/aplus-fsf/devel/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204221218.075:110): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1204221218.078:111): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1204221218.123:112): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1204221218.123:113): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_LOGIN msg=audit(1204221218.175:114): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1204221661.405:115): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204221661.407:116): user pid=13631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204221661.407:117): login pid=13631 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204221661.433:118): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204221661.662:119): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204221661.663:120): user pid=13631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_START msg=audit(1204221921.777:121): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204221921.777:122): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1204221931.910:123): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1204221931.911:124): user pid=14233 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1204221932.058:125): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_open acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1204221932.058:126): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1204222187.793:127): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:setcred acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1204222187.793:128): user pid=14259 uid=0 auid=4294967295 subj=system_u:system_r:system_crond_t:s0 msg='op=PAM:session_close acct=beaglidx exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1204222537.402:129): avc:  denied  { getattr } for  pid=18907 comm="tmpwatch" path="/tmp/.esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204222537.402:129): arch=c000003e syscall=6 success=yes exit=0 a0=6043bb a1=7fff56a3e3a0 a2=7fff56a3e3a0 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204222537.402:130): avc:  denied  { search } for  pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204222537.402:130): arch=c000003e syscall=80 success=yes exit=0 a0=6043bb a1=7fff56a3e0a0 a2=0 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204222537.402:131): avc:  denied  { read } for  pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204222537.402:131): arch=c000003e syscall=2 success=yes exit=7 a0=402f0a a1=90800 a2=0 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204222537.411:132): avc:  denied  { getattr } for  pid=18907 comm="tmpwatch" path="/tmp/.esd-500/socket" dev=dm-0 ino=163383 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204222537.411:132): arch=c000003e syscall=6 success=yes exit=0 a0=605a4b a1=7fff56a3e210 a2=7fff56a3e210 a3=3688d529f0 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204222537.411:133): avc:  denied  { setattr } for  pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204222537.411:133): arch=c000003e syscall=132 success=yes exit=0 a0=402f0a a1=7fff56a3e2a0 a2=3688d529d8 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204222537.411:134): avc:  denied  { rmdir } for  pid=18907 comm="tmpwatch" name=".esd-500" dev=dm-0 ino=163430 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=SYSCALL msg=audit(1204222537.411:134): arch=c000003e syscall=84 success=no exit=-39 a0=6043bb a1=402d48 a2=401431 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1204222537.543:135): avc:  denied  { getattr } for  pid=18907 comm="tmpwatch" path="/tmp/pulse-s4504kr/pid" dev=dm-0 ino=163429 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file
>type=SYSCALL msg=audit(1204222537.543:135): arch=c000003e syscall=6 success=yes exit=0 a0=605a6b a1=7fff56a3e210 a2=7fff56a3e210 a3=3688b22902 items=0 ppid=18905 pid=18907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1204225261.987:136): user pid=9057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204225261.988:137): user pid=9057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204225261.988:138): login pid=9057 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204225262.204:139): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204225262.527:140): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204225262.528:141): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204226229.973:142): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204226229.976:143): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204226230.041:144): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204226230.047:145): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204226230.047:146): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204226230.047:147): user pid=25636 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204226370.058:148): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204226370.059:149): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204226370.059:150): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204226370.059:151): user pid=25908 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204227558.785:152): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1204227558.788:153): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_ACQ msg=audit(1204227558.820:154): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_START msg=audit(1204227558.834:155): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1204227558.834:156): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_CMD msg=audit(1204227558.834:157): user pid=9732 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/luma/devel/noarch" cmd="/bin/rpm" (terminal=tty4 res=success)'
>type=USER_ACCT msg=audit(1204228861.916:158): user pid=31868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204228861.917:159): user pid=31868 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204228861.917:160): login pid=31868 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204228862.094:161): user pid=31868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204228862.431:162): user pid=31868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204228862.432:163): user pid=31868 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1204229709.497:164): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204229709.499:165): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204229709.569:166): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204229709.575:167): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204229709.575:168): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204229709.575:169): user pid=15460 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204229787.282:170): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204229787.283:171): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204229787.283:172): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204229787.284:173): user pid=15765 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/usr/bin/yum" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204229983.562:174): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204229983.563:175): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204229983.564:176): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204229983.564:177): user pid=16086 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204230037.117:178): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204230037.118:179): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204230037.118:180): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204230037.119:181): user pid=16156 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204230048.833:182): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204230048.834:183): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204230048.834:184): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204230048.835:185): user pid=16183 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204230069.959:186): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204230069.960:187): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204230069.960:188): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204230069.960:189): user pid=16219 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204230083.219:190): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204230083.220:191): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204230083.220:192): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204230083.221:193): user pid=16254 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204230095.129:194): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204230095.129:195): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204230095.130:196): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204230095.130:197): user pid=16264 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204230101.892:198): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204230101.893:199): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204230101.893:200): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_CMD msg=audit(1204230101.893:201): user pid=16273 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/kdelibs4/F-8/x86_64" cmd="/bin/rpm" (terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204231865.901:202): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204231865.903:203): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204231865.903:204): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204231865.905:205): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204231865.905:206): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204231865.905:207): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204231866.298:208): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204231866.298:209): user pid=8124 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204231866.987:210): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=USER_END msg=audit(1204231867.083:211): user pid=2661 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty4 res=success)'
>type=CRED_DISP msg=audit(1204231867.115:212): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204231867.138:213): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1204231867.199:214): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1204231867.229:215): user pid=2659 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1204231867.259:216): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204231867.264:217): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204231867.383:218): avc:  denied  { unlink } for  pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=328035 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204231867.383:218): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fff5ec5a200 a2=7fff5ec5a0d0 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1204231885.520:9156): auditd normal halt, sending auid=4294967295 pid=8543 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204232517.295:4725): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2120 res=success
>type=CONFIG_CHANGE msg=audit(1204232517.395:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204232517.395:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204232517.732:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204232517.732:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204232518.499:9): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204232518.499:10): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204232519.684:11): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204232519.684:12): user pid=2143 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204232555.469:13): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1204232555.474:14): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1204232555.474:15): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1204232555.507:16): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1204232555.508:17): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1204232580.250:18): avc:  denied  { execheap } for  pid=3324 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204232580.250:18): arch=c000003e syscall=10 success=yes exit=0 a0=efe000 a1=1000 a2=7 a3=0 items=0 ppid=1 pid=3324 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204232999.770:19): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1204232999.779:20): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204233003.273:21): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204233003.276:22): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204233003.290:23): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204233003.297:24): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204233003.297:25): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204233922.034:26): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1204233922.036:27): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1204233922.053:28): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1204233922.060:29): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1204233922.072:30): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_AUTH msg=audit(1204235481.195:31): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204235481.198:32): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204235481.199:33): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204235481.199:34): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_LOGIN msg=audit(1204235481.200:35): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_AUTH msg=audit(1204235557.411:36): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204235557.414:37): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204235557.415:38): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204235557.416:39): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204235557.416:40): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1204235557.417:41): user pid=14606 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/common" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=CRED_ACQ msg=audit(1204235633.793:42): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_START msg=audit(1204235633.794:43): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204235633.794:44): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_CMD msg=audit(1204235633.795:45): user pid=14794 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr/cvs/fedora/common" cmd="/usr/bin/yum" (terminal=tty3 res=success)'
>type=USER_ACCT msg=audit(1204236061.787:46): user pid=15241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1204236061.788:47): user pid=15241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1204236061.789:48): login pid=15241 uid=0 old auid=4294967295 new auid=0
>type=USER_START msg=audit(1204236061.813:49): user pid=15241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1204236061.967:50): user pid=15241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204236061.968:51): user pid=15241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1204236655.643:52): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204236655.643:53): user pid=2930 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_DISP msg=audit(1204236655.893:54): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204236655.893:55): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=USER_END msg=audit(1204236655.894:56): user pid=2785 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204236655.895:57): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty3 res=success)'
>type=CRED_DISP msg=audit(1204236655.897:58): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=AVC msg=audit(1204236655.898:59): avc:  denied  { signal } for  pid=2786 comm="login" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204236655.898:59): arch=c000003e syscall=62 success=yes exit=0 a0=b91 a1=f a2=b91 a3=0 items=0 ppid=1 pid=2786 auid=4294967295 uid=0 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1204236655.900:60): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1204236657.127:61): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2791 comm="gdm-binary" sig=11
>type=DAEMON_END msg=audit(1204236666.043:4726): auditd normal halt, sending auid=4294967295 pid=16738 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204482520.300:5688): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2069 res=success
>type=CONFIG_CHANGE msg=audit(1204482520.400:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204482520.400:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204482520.839:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204482520.839:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204482521.597:8): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_ACQ msg=audit(1204482521.597:9): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=CRED_DISP msg=audit(1204482523.486:10): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_END msg=audit(1204482523.487:11): user pid=2092 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=console res=success)'
>type=USER_AUTH msg=audit(1204482540.505:12): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204482540.507:13): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204482540.551:14): avc:  denied  { create } for  pid=2766 comm="ssh-agent" name="agent.2766" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204482540.551:14): arch=c000003e syscall=49 success=yes exit=0 a0=4 a1=7fffcac9c8a0 a2=6e a3=0 items=0 ppid=2657 pid=2766 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204482540.552:15): avc:  denied  { write } for  pid=2657 comm="login" name="agent.2766" dev=dm-0 ino=326793 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204482540.552:15): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fffed59f910 a2=6e a3=0 items=0 ppid=1 pid=2657 auid=4294967295 uid=0 gid=0 euid=500 suid=0 fsuid=500 egid=500 sgid=0 fsgid=500 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=USER_START msg=audit(1204482540.552:16): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204482540.562:17): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1204482540.573:18): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204482549.597:19): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204482549.600:20): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204482549.601:21): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204482549.601:22): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204482549.602:23): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204482549.602:24): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/yum" (terminal=tty1 res=success)'
>type=AVC msg=audit(1204482843.902:25): avc:  denied  { read write } for  pid=3209 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482843.902:25): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaaacccfd0 a1=2aaab2c03100 a2=0 a3=0 items=0 ppid=3204 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1204482844.365:26): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1204482844.047:27): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1204482844.047:27): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3204 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204482888.825:28): avc:  denied  { read write } for  pid=3408 comm="useradd" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482888.825:28): arch=c000003e syscall=59 success=yes exit=0 a0=8ca6c0 a1=8c8870 a2=8c7fd0 a3=3688d529f0 items=0 ppid=3407 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204482888.885:29): avc:  denied  { ioctl } for  pid=3408 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482888.885:29): arch=c000003e syscall=16 success=yes exit=0 a0=1 a1=5401 a2=7fff87074c30 a3=2aaaaf5ced32 items=0 ppid=3407 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1204482888.885:30): avc:  denied  { getattr } for  pid=3408 comm="useradd" path="/dev/tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482888.885:30): arch=c000003e syscall=6 success=yes exit=0 a0=7fff870792d0 a1=7fff87074e40 a2=7fff87074e40 a3=2aaaaf5ced32 items=0 ppid=3407 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="useradd" exe="/usr/sbin/useradd" subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1204482888.885:31): user pid=3408 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1204482910.951:32): avc:  denied  { connectto } for  pid=3462 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1204482910.951:32): arch=c000003e syscall=42 success=yes exit=0 a0=5 a1=414003d0 a2=19 a3=0 items=0 ppid=1 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1204482930.102:33): user pid=3490 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1204482937.586:34): avc:  denied  { read write } for  pid=3492 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482937.586:34): arch=c000003e syscall=59 success=yes exit=0 a0=1c26a40 a1=17b0f50 a2=0 a3=2aaaaaaeb210 items=0 ppid=3491 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1204482938.020:35): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1204482937.711:36): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1204482937.711:36): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3491 pid=3492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1204482938.420:37): user pid=3491 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204482945.853:38): avc:  denied  { read write } for  pid=3503 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482945.853:38): arch=c000003e syscall=59 success=yes exit=0 a0=185e240 a1=91753f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3500 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1204482946.288:39): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1204482945.978:40): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1204482945.978:40): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3500 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1204482946.670:41): user pid=3500 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1204482947.896:42): user pid=3506 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=AVC msg=audit(1204482956.323:43): avc:  denied  { read write } for  pid=3514 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482956.323:43): arch=c000003e syscall=59 success=yes exit=0 a0=1c26a40 a1=17b0f50 a2=0 a3=2aaaaaaeb210 items=0 ppid=3507 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1204482956.758:44): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1204482956.449:45): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1204482956.449:45): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3507 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1204482957.142:46): user pid=3507 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0-s0:c0.c1023 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204482964.544:47): avc:  denied  { read write } for  pid=3523 comm="load_policy" name="tty1" dev=tmpfs ino=2279 scontext=system_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1204482964.544:47): arch=c000003e syscall=59 success=yes exit=0 a0=185e240 a1=91753f0 a2=0 a3=2aaaaaaeb210 items=0 ppid=3516 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1204482964.978:48): user pid=2109 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1204482964.669:49): policy loaded auid=4294967295
>type=SYSCALL msg=audit(1204482964.669:49): arch=c000003e syscall=1 success=yes exit=4135785 a0=4 a1=2aaaab87a000 a2=3f1b69 a3=0 items=0 ppid=3516 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ROLE_CHANGE msg=audit(1204482965.360:50): user pid=3516 uid=0 auid=4294967295 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204483343.779:51): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204483343.780:52): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204483343.780:53): user pid=3821 uid=500 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1204483366.053:54): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204483366.055:55): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1204483366.056:56): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1204483366.057:57): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204483366.057:58): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CMD msg=audit(1204483366.057:59): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/s4504kr" cmd="/usr/bin/reboot" (terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1204483366.064:60): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1204483366.064:61): user pid=3829 uid=0 auid=4294967295 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1204483366.138:62): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1204483366.138:63): user pid=2657 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=s4504kr exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1204483366.138:64): avc:  denied  { unlink } for  pid=2767 comm="ssh-agent" name="agent.2766" dev=dm-0 ino=326793 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1204483366.138:64): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaaacc1fc0 a1=7fffcac9c0b0 a2=7fffcac9bf80 a3=0 items=0 ppid=1 pid=2767 auid=4294967295 uid=500 gid=0 euid=500 suid=500 fsuid=500 egid=0 sgid=99 fsgid=0 tty=(none) comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=DAEMON_END msg=audit(1204483372.828:5689): auditd normal halt, sending auid=4294967295 pid=4241 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1204483453.591:2339): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=2073 res=success
>type=CONFIG_CHANGE msg=audit(1204483453.690:4): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204483453.690:5): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1204483454.027:6): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1204483454.027:7): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=USER_START msg=audit(1204483455.275:8): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1204483455.275:9): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1204483456.675:10): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1204483456.675:11): user pid=2096 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct=ldap exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1204483488.496:12): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1204483488.501:13): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1204483488.511:14): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_START msg=audit(1204483488.559:15): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=s4504kr exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1204483488.560:16): user pid=2925 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=zeus.herr-schmitt.de, addr=127.0.0.1, terminal=:0 res=success)'
>type=AVC msg=audit(1204483528.915:17): avc:  denied  { execheap } for  pid=3298 comm="beagled" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1204483528.915:17): arch=c000003e syscall=10 success=yes exit=0 a0=eae000 a1=1000 a2=7 a3=3688d529f0 items=0 ppid=1 pid=3298 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) comm="beagled" exe="/usr/bin/mono" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1204483565.518:18): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1204483565.521:19): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1204483565.576:20): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1204483565.576:21): user pid=3819 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'

Actions: View

Attachments on bug 430932: 293457 | 296518 | 296519 | 296626