Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 299442 Details for
Bug 439362
Bad: Wireless USB Adapter does not work
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
copy of /var/log/audit/audit.log as requested
audit.log (text/plain), 449.80 KB, created by
Bob Horrobin
on 2008-03-28 10:03:31 UTC
(
hide
)
Description:
copy of /var/log/audit/audit.log as requested
Filename:
MIME Type:
Creator:
Bob Horrobin
Created:
2008-03-28 10:03:31 UTC
Size:
449.80 KB
patch
obsolete
>type=DAEMON_START msg=audit(1204059908.773:5135): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=1710 res=success, auditd pid=1710 >type=CONFIG_CHANGE msg=audit(1204059908.873:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204059908.873:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204059908.913:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204059908.913:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USYS_CONFIG msg=audit(1204052822.500:9): user pid=2304 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1204052893.044:10): user pid=2310 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1204052893.046:11): user pid=2310 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1204052893.086:12): user pid=2310 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204052936.293:13): user pid=2310 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204052974.160:14): user pid=2397 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204052974.197:15): user pid=2397 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204052974.199:16): user pid=2397 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204052974.204:17): login pid=2397 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1204052974.243:18): user pid=2397 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204052974.371:19): user pid=2397 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204052974.374:20): user pid=2397 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204053276.973:21): user pid=2702 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204053276.974:22): user pid=2702 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204053277.226:23): user pid=2702 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204056061.957:24): user pid=3012 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204059662.292:25): user pid=10818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204063261.408:26): user pid=10908 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204066861.460:27): user pid=14944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204070461.786:28): user pid=15049 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204074061.838:29): user pid=15151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204077661.889:30): user pid=15253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204077721.921:31): user pid=15258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204081261.796:32): user pid=19525 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204084861.930:33): user pid=19627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204088461.980:34): user pid=19729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204092061.030:35): user pid=19831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1204094128.017:36): user pid=20147 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=gnokii exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094186.115:37): user pid=20168 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094186.324:38): user pid=20169 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=pulse exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094186.334:39): user pid=20170 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-rt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094186.343:40): user pid=20171 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=pulse-access exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094210.262:41): user pid=20190 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=deleting user entries acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1204094210.307:42): user pid=20190 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/userdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204094212.325:43): user pid=20193 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=delete SELinux user mapping acct="rpc" old-seuser=? old-role=? old-range=? new-seuser=? new-role=? new-range=? exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094212.741:44): user pid=20196 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=deleting group acct=rpc exe="/usr/sbin/groupdel" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204094212.784:45): user pid=20197 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=rpc exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1204094212.980:46): user pid=20201 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=rpc exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AVC msg=audit(1204094489.554:47): user pid=1872 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=signal interface=com.redhat.SEtroubleshootdIface member=restart dest=org.freedesktop.DBus spid=20396 tpid=2575 scontext=system_u:system_r:rpm_script_t:s0 tcontext=system_u:system_r:unconfined_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1204094521.398:48): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094521.398:48): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094521.510:49): avc: denied { read } for pid=2079 comm="crond" name="smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094521.510:49): arch=40000003 syscall=5 success=no exit=-13 a0=bf9cca58 a1=800 a2=0 a3=1 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094581.957:50): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094581.957:50): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094642.055:51): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094642.055:51): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094701.441:52): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094701.441:52): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094761.510:53): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094761.510:53): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094821.580:54): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094821.580:54): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094881.706:55): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094881.706:55): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204094941.761:56): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204094941.761:56): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204095001.845:57): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204095001.845:57): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204095061.971:58): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204095061.971:58): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204095121.058:59): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204095121.058:59): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1204095181.369:60): avc: denied { getattr } for pid=2079 comm="crond" path="/etc/cron.d/smolt" dev=dm-0 ino=491611 scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:object_r:rpm_script_tmp_t:s0 tclass=file >type=SYSCALL msg=audit(1204095181.369:60): arch=40000003 syscall=195 success=no exit=-13 a0=bf9cc708 a1=bf9cc620 a2=2c0ff4 a3=3 items=0 ppid=1 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="crond" exe="/usr/sbin/crond" subj=system_u:system_r:crond_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1204095662.390:61): user pid=20919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=failed)' >type=USER_ACCT msg=audit(1204095662.407:62): user pid=20919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=failed)' >type=USER_CHAUTHTOK msg=audit(1204095856.083:63): user pid=20952 uid=0 auid=0 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204096286.649:64): user pid=23634 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=mailnull exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204096286.659:65): user pid=23635 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=smmsp exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204096579.110:66): user pid=23757 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=sshd exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204096584.108:67): user pid=23761 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=gdm exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1204096584.317:68): user pid=23762 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=changing user shell acct=gdm exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1204096775.326:69): user pid=23848 uid=0 auid=0 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=apache exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=MAC_POLICY_LOAD msg=audit(1204097680.341:70): policy loaded auid=0 >type=SYSCALL msg=audit(1204097680.341:70): arch=40000003 syscall=4 success=yes exit=4047120 a0=4 a1=b7b59000 a2=3dc110 a3=bfb09438 items=0 ppid=25240 pid=25247 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1204097682.837:71): user pid=1872 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_CONFIG_CHANGE msg=audit(1204098410.673:72): bool=use_nfs_home_dirs val=1 old_val=0 auid=0 >type=USER_AVC msg=audit(1204098410.682:73): user pid=1872 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1204098410.673:72): arch=40000003 syscall=4 success=yes exit=2 a0=4 a1=bf9eac36 a2=2 a3=bf9eac38 items=0 ppid=26039 pid=26040 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null) >type=USER_AVC msg=audit(1204098478.750:74): user pid=1872 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1204098476.981:75): policy loaded auid=0 >type=SYSCALL msg=audit(1204098476.981:75): arch=40000003 syscall=4 success=yes exit=4047120 a0=4 a1=b7b38000 a2=3dc110 a3=bf8f66c8 items=0 ppid=26044 pid=26048 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204098484.146:76): user pid=26044 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=unconfined_u old-role=? old-range=s0 new-seuser=system_u new-role=? new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=success)' >type=USER_ROLE_CHANGE msg=audit(1204098493.267:77): user pid=26050 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204098500.960:78): user pid=26052 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="guest_u" old-seuser=? old-role=? old-range=? new-seuser=guest_u new-role=guest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204098508.622:79): user pid=26053 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="xguest_u" old-seuser=? old-role=? old-range=? new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204098518.750:80): user pid=26058 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204098527.810:81): user pid=26059 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204098586.349:82): user pid=26061 uid=0 auid=0 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_END msg=audit(1204098652.028:5136): auditd normal halt, sending auid=0 pid=26102 subj=system_u:system_r:initrc_t:s0 res=success, auditd pid=1710 >type=DAEMON_START msg=audit(1204098653.950:9937): auditd start, ver=1.6.5 format=raw kernel=2.6.23.1-42.fc8 auid=0 pid=26119 res=success >type=CONFIG_CHANGE msg=audit(1204098654.051:85): audit_enabled=1 old=1 by auid=0 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204098654.051:86): audit_enabled=1 old=1 by auid=0 res=1 >type=CONFIG_CHANGE msg=audit(1204098654.127:87): audit_backlog_limit=320 old=320 by auid=0 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204098654.127:88): audit_backlog_limit=320 old=320 by auid=0 res=1 >type=USER_ACCT msg=audit(1204099263.040:89): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204099263.065:90): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204099263.066:91): login pid=26984 uid=0 old auid=0 new auid=0 >type=USER_START msg=audit(1204099263.105:92): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204099263.182:93): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204099263.185:94): user pid=26984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204102862.016:95): user pid=27088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204102862.019:96): user pid=27088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204102862.019:97): login pid=27088 uid=0 old auid=0 new auid=0 >type=USER_START msg=audit(1204102862.021:98): user pid=27088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204102862.037:99): user pid=27088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204102862.038:100): user pid=27088 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204103096.241:101): user pid=2397 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204103097.233:102): user pid=2397 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1204103131.648:9938): auditd normal halt, sending auid=4294967295 pid=27287 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204105731.826:3430): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1886 res=success >type=CONFIG_CHANGE msg=audit(1204105731.928:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204105731.928:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204105732.098:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204105732.098:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ACCT msg=audit(1204106462.634:9): user pid=2405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204106462.638:10): user pid=2405 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204106462.640:11): login pid=2405 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204106462.647:12): user pid=2405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204106462.776:13): user pid=2405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204106462.779:14): user pid=2405 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204110062.619:15): user pid=2507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204110062.624:16): user pid=2507 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204110062.626:17): login pid=2507 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204110062.631:18): user pid=2507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204110062.890:19): user pid=2507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204110062.892:20): user pid=2507 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204113661.927:21): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204113661.931:22): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204113661.933:23): login pid=2609 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204113661.937:24): user pid=2609 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204113661.953:25): user pid=2609 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204113661.954:26): user pid=2609 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204117261.988:27): user pid=2711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204117261.991:28): user pid=2711 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204117261.993:29): login pid=2711 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204117261.998:30): user pid=2711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204117262.015:31): user pid=2711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204117262.017:32): user pid=2711 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204120861.053:33): user pid=2813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204120861.056:34): user pid=2813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204120861.058:35): login pid=2813 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204120861.062:36): user pid=2813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204120861.079:37): user pid=2813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204120861.081:38): user pid=2813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204122942.665:39): user pid=2360 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204122942.680:40): user pid=2360 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204122942.682:41): user pid=2360 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204122942.691:42): login pid=2360 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204122942.938:43): user pid=2360 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204122943.189:44): user pid=2360 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204122943.191:45): user pid=2360 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204124463.166:46): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204124463.219:47): user pid=3185 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204124463.219:48): login pid=3185 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204124463.278:49): user pid=3185 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204124464.147:50): user pid=3185 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204124464.149:51): user pid=3185 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204128062.210:52): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204128062.235:53): user pid=3287 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204128062.237:54): login pid=3287 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204128062.242:55): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204128062.425:56): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204128062.427:57): user pid=3287 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204131662.651:58): user pid=3389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204131662.678:59): user pid=3389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204131662.680:60): login pid=3389 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204131662.701:61): user pid=3389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204131663.093:62): user pid=3389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204131663.095:63): user pid=3389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204135262.023:64): user pid=3491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204135262.027:65): user pid=3491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204135262.029:66): login pid=3491 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204135262.036:67): user pid=3491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204135262.266:68): user pid=3491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204135262.269:69): user pid=3491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204138689.281:70): user pid=3589 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204138689.281:71): user pid=3589 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204138689.943:72): user pid=3589 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204138862.122:73): user pid=3646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204138862.123:74): user pid=3646 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204138862.124:75): login pid=3646 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204138862.130:76): user pid=3646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204138862.256:77): user pid=3646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204138862.256:78): user pid=3646 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204138989.073:79): user pid=3589 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139125.710:80): user pid=3700 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139125.711:81): user pid=3700 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139125.741:82): user pid=3700 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139126.896:83): user pid=3700 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139138.204:84): user pid=3714 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139138.207:85): user pid=3714 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139138.220:86): user pid=3714 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139139.154:87): user pid=3714 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139143.639:88): user pid=3727 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139143.642:89): user pid=3727 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139143.655:90): user pid=3727 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139144.590:91): user pid=3727 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139146.448:92): user pid=3740 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139146.450:93): user pid=3740 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139146.463:94): user pid=3740 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139147.381:95): user pid=3740 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139179.223:96): user pid=3762 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139179.225:97): user pid=3762 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139179.238:98): user pid=3762 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139180.174:99): user pid=3762 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139182.801:100): user pid=3774 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139182.804:101): user pid=3774 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139182.817:102): user pid=3774 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204139183.092:103): user pid=3778 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204139183.096:104): user pid=3778 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204139183.115:105): user pid=3778 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139184.693:106): user pid=3774 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204139184.838:107): user pid=3778 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1204139208.863:108): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2946 comm="pulseaudio" sig=6 >type=USER_END msg=audit(1204139215.354:109): user pid=2360 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204139215.514:110): user pid=2360 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1204139235.361:3431): auditd normal halt, sending auid=4294967295 pid=3977 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204139387.266:7398): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1871 res=success >type=CONFIG_CHANGE msg=audit(1204139387.367:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204139387.367:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204139387.521:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204139387.521:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1204142225.818:9): user pid=2350 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204142225.833:10): user pid=2350 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204142226.590:11): user pid=2350 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204142226.599:12): login pid=2350 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204142226.669:13): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204142226.789:14): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204142226.792:15): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204142461.645:16): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204142461.648:17): user pid=2682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204142461.649:18): login pid=2682 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204142461.687:19): user pid=2682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204142462.157:20): user pid=2682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204142462.159:21): user pid=2682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204146061.984:22): user pid=2798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204146061.987:23): user pid=2798 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204146061.989:24): login pid=2798 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204146061.993:25): user pid=2798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204146062.023:26): user pid=2798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204146062.025:27): user pid=2798 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204149573.690:28): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204149573.690:29): user pid=2350 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1204149576.632:30): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2279 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1204149586.886:7399): auditd normal halt, sending auid=4294967295 pid=3110 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204229169.053:7033): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1875 res=success >type=CONFIG_CHANGE msg=audit(1204229169.157:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204229169.157:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204229169.334:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204229169.334:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1204229221.499:9): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204229221.513:10): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204229221.515:11): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204229221.525:12): login pid=2352 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204229221.603:13): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204229221.678:14): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204229221.680:15): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204229290.323:16): user pid=2609 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204229290.323:17): user pid=2609 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204229291.378:18): user pid=2609 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204229338.837:19): user pid=2609 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204229672.712:20): user pid=2628 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204229672.713:21): user pid=2628 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204229672.988:22): user pid=2628 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204232462.808:23): user pid=2709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204232462.870:24): user pid=2709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204232462.870:25): login pid=2709 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204232462.926:26): user pid=2709 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204232463.686:27): user pid=2709 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204232463.687:28): user pid=2709 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1204232994.146:29): user pid=2763 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=hsqldb exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1204232995.187:30): user pid=2767 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=hsqldb exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204236063.473:31): user pid=3026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204236063.476:32): user pid=3026 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204236063.478:33): login pid=3026 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204236063.520:34): user pid=3026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204236063.701:35): user pid=3026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204236063.704:36): user pid=3026 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204239663.309:37): user pid=7079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204239663.312:38): user pid=7079 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204239663.313:39): login pid=7079 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204239663.384:40): user pid=7079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204239663.516:41): user pid=7079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204239663.517:42): user pid=7079 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204243261.307:43): user pid=7181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204243261.310:44): user pid=7181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204243261.312:45): login pid=7181 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204243261.316:46): user pid=7181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204243262.067:47): user pid=7181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204243262.067:48): user pid=7181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204246861.101:49): user pid=7283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204246861.104:50): user pid=7283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204246861.106:51): login pid=7283 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204246861.110:52): user pid=7283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204246861.125:53): user pid=7283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204246861.127:54): user pid=7283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204250461.162:55): user pid=7385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204250461.165:56): user pid=7385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204250461.167:57): login pid=7385 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204250461.172:58): user pid=7385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204250461.186:59): user pid=7385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204250461.186:60): user pid=7385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204250521.237:61): user pid=7390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204250521.240:62): user pid=7390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204250521.242:63): login pid=7390 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204250521.246:64): user pid=7390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204254061.221:65): user pid=7497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204254061.224:66): user pid=7497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204254061.226:67): login pid=7497 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204254061.231:68): user pid=7497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204254061.245:69): user pid=7497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204254061.246:70): user pid=7497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204254430.961:71): user pid=7390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204254430.965:72): user pid=7390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204257662.943:73): user pid=8274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204257662.962:74): user pid=8274 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204257662.964:75): login pid=8274 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204257662.970:76): user pid=8274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204257663.008:77): user pid=8274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204257663.010:78): user pid=8274 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204261261.045:79): user pid=8376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204261261.048:80): user pid=8376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204261261.050:81): login pid=8376 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204261261.055:82): user pid=8376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204261261.070:83): user pid=8376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204261261.073:84): user pid=8376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204264861.108:85): user pid=8478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204264861.111:86): user pid=8478 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204264861.113:87): login pid=8478 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204264861.117:88): user pid=8478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204264861.132:89): user pid=8478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204264861.134:90): user pid=8478 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204268461.170:91): user pid=8580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204268461.172:92): user pid=8580 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204268461.174:93): login pid=8580 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204268461.179:94): user pid=8580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204268461.194:95): user pid=8580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204268461.197:96): user pid=8580 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204272062.842:97): user pid=8955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204272062.890:98): user pid=8955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204272062.890:99): login pid=8955 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204272063.025:100): user pid=8955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204272063.705:101): user pid=8955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204272063.706:102): user pid=8955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204275662.453:103): user pid=9057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204275662.456:104): user pid=9057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204275662.457:105): login pid=9057 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204275662.460:106): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204275662.475:107): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204275662.476:108): user pid=9057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204279261.510:109): user pid=9159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204279261.513:110): user pid=9159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204279261.515:111): login pid=9159 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204279261.519:112): user pid=9159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204279261.534:113): user pid=9159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204279261.536:114): user pid=9159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204282861.571:115): user pid=9261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204282861.574:116): user pid=9261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204282861.576:117): login pid=9261 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204282861.582:118): user pid=9261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204282861.597:119): user pid=9261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204282861.600:120): user pid=9261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204286461.635:121): user pid=9363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204286461.638:122): user pid=9363 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204286461.640:123): login pid=9363 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204286461.646:124): user pid=9363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204286461.661:125): user pid=9363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204286461.662:126): user pid=9363 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204290061.696:127): user pid=9465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204290061.699:128): user pid=9465 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204290061.701:129): login pid=9465 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204290061.705:130): user pid=9465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204290061.720:131): user pid=9465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204290061.723:132): user pid=9465 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204293661.758:133): user pid=9567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204293661.761:134): user pid=9567 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204293661.763:135): login pid=9567 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204293661.768:136): user pid=9567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204293661.783:137): user pid=9567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204293661.786:138): user pid=9567 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204297261.821:139): user pid=9669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204297261.824:140): user pid=9669 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204297261.826:141): login pid=9669 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204297261.831:142): user pid=9669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204297261.846:143): user pid=9669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204297261.848:144): user pid=9669 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204300862.630:145): user pid=9771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204300862.633:146): user pid=9771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204300862.635:147): login pid=9771 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204300862.639:148): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204300862.655:149): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204300862.657:150): user pid=9771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204304461.694:151): user pid=9873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204304461.697:152): user pid=9873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204304461.699:153): login pid=9873 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204304461.703:154): user pid=9873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204304461.718:155): user pid=9873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204304461.720:156): user pid=9873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204308061.756:157): user pid=9975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204308061.759:158): user pid=9975 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204308061.761:159): login pid=9975 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204308061.765:160): user pid=9975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204308061.780:161): user pid=9975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204308061.783:162): user pid=9975 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204311661.818:163): user pid=10077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204311661.821:164): user pid=10077 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204311661.823:165): login pid=10077 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204311661.826:166): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204311661.839:167): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204311661.840:168): user pid=10077 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204315261.874:169): user pid=10179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204315261.877:170): user pid=10179 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204315261.879:171): login pid=10179 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204315261.883:172): user pid=10179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204315261.898:173): user pid=10179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204315261.901:174): user pid=10179 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204318862.554:175): user pid=10281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204318862.557:176): user pid=10281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204318862.559:177): login pid=10281 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204318862.565:178): user pid=10281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204318862.582:179): user pid=10281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204318862.584:180): user pid=10281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204322462.359:181): user pid=10383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204322462.361:182): user pid=10383 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204322462.363:183): login pid=10383 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204322462.368:184): user pid=10383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204322462.428:185): user pid=10383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204322462.431:186): user pid=10383 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204326062.228:187): user pid=10485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204326062.230:188): user pid=10485 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204326062.232:189): login pid=10485 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204326062.237:190): user pid=10485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204326062.307:191): user pid=10485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204326062.309:192): user pid=10485 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204329661.345:193): user pid=10587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204329661.348:194): user pid=10587 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204329661.350:195): login pid=10587 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204329661.354:196): user pid=10587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204329661.369:197): user pid=10587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204329661.372:198): user pid=10587 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204333261.407:199): user pid=10689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204333261.410:200): user pid=10689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204333261.412:201): login pid=10689 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204333261.416:202): user pid=10689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204333261.431:203): user pid=10689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204333261.434:204): user pid=10689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204336861.469:205): user pid=10791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204336861.472:206): user pid=10791 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204336861.474:207): login pid=10791 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204336861.478:208): user pid=10791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204336861.493:209): user pid=10791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204336861.496:210): user pid=10791 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204336921.513:211): user pid=10796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204336921.516:212): user pid=10796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204336921.518:213): login pid=10796 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204336921.522:214): user pid=10796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204339321.527:215): user pid=10873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204339321.530:216): user pid=10873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204339321.532:217): login pid=10873 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204339321.537:218): user pid=10873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204340461.534:219): user pid=10913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204340461.537:220): user pid=10913 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204340461.539:221): login pid=10913 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204340461.543:222): user pid=10913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204340461.558:223): user pid=10913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204340461.561:224): user pid=10913 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204340874.549:225): user pid=10796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204340874.632:226): user pid=10796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204343162.615:227): user pid=10873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204343162.617:228): user pid=10873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204344062.860:229): user pid=11513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204344062.863:230): user pid=11513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204344062.865:231): login pid=11513 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204344062.872:232): user pid=11513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204344062.981:233): user pid=11513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204344062.983:234): user pid=11513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204347661.019:235): user pid=11615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204347661.022:236): user pid=11615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204347661.024:237): login pid=11615 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204347661.028:238): user pid=11615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204347661.045:239): user pid=11615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204347661.045:240): user pid=11615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204351261.079:241): user pid=11717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204351261.082:242): user pid=11717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204351261.084:243): login pid=11717 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204351261.089:244): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204351261.104:245): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204351261.105:246): user pid=11717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204354861.139:247): user pid=11819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204354861.142:248): user pid=11819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204354861.144:249): login pid=11819 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204354861.148:250): user pid=11819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204354861.163:251): user pid=11819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204354861.166:252): user pid=11819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204358461.950:253): user pid=11921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204358461.951:254): user pid=11921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204358461.951:255): login pid=11921 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204358461.956:256): user pid=11921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204358461.979:257): user pid=11921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204358461.980:258): user pid=11921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204362062.014:259): user pid=12023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204362062.017:260): user pid=12023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204362062.019:261): login pid=12023 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204362062.023:262): user pid=12023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204362062.038:263): user pid=12023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204362062.041:264): user pid=12023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204365661.076:265): user pid=12125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204365661.079:266): user pid=12125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204365661.081:267): login pid=12125 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204365661.085:268): user pid=12125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204365661.100:269): user pid=12125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204365661.103:270): user pid=12125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AVC msg=audit(1204369104.036:271): user pid=1891 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.ConsoleKit.Manager member=GetSeats dest=org.freedesktop.ConsoleKit spid=12226 tpid=2014 scontext=system_u:system_r:apmd_t:s0 tcontext=system_u:system_r:consolekit_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1204369115.368:272): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204369115.414:273): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1204369142.249:7034): auditd normal halt, sending auid=4294967295 pid=12429 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204369506.918:3795): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1873 res=success >type=CONFIG_CHANGE msg=audit(1204369507.019:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204369507.019:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204369507.186:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204369507.186:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1204369566.966:9): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204369566.981:10): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204369566.985:11): user pid=2352 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204369567.002:12): login pid=2352 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204369567.077:13): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204369567.181:14): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204369567.184:15): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204369766.585:16): user pid=2606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1204369781.232:17): user pid=2606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1204369797.965:18): user pid=2606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204369797.965:19): user pid=2606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204369798.412:20): user pid=2606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_POLICY_LOAD msg=audit(1204370247.108:21): policy loaded auid=500 >type=SYSCALL msg=audit(1204370247.108:21): arch=40000003 syscall=4 success=yes exit=4078047 a0=4 a1=b7b96000 a2=3e39df a3=bfe8dd78 items=0 ppid=2665 pid=2668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1204370249.233:22): user pid=1889 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_CHAUTHTOK msg=audit(1204370357.530:23): user pid=2820 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=dbus exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1204370429.753:24): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370429.753:24): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204370475.072:25): user pid=2893 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204370482.949:26): user pid=2894 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1204370489.762:27): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370489.762:27): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204370539.648:28): user pid=2895 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1204370549.176:29): user pid=2899 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1204370549.764:30): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370549.764:30): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204370556.910:31): user pid=2900 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1204370609.793:32): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370609.793:32): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ROLE_CHANGE msg=audit(1204370612.126:33): user pid=2901 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1204370669.833:34): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370669.833:34): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204370729.835:35): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370729.835:35): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204370789.837:36): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370789.837:36): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204370849.839:37): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370849.839:37): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204370909.841:38): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370909.841:38): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204370969.843:39): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204370969.843:39): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371029.845:40): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371029.845:40): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371089.847:41): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371089.847:41): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371149.849:42): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371149.849:42): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371209.851:43): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371209.851:43): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371269.853:44): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371269.853:44): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371329.855:45): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371329.855:45): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371389.857:46): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371389.857:46): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371449.859:47): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371449.859:47): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371509.861:48): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371509.861:48): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371569.863:49): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371569.863:49): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371629.865:50): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371629.865:50): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371689.867:51): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371689.867:51): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371749.870:52): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371749.870:52): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204371809.872:53): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371809.872:53): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_END msg=audit(1204371826.453:54): user pid=2606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204371869.874:55): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371869.874:55): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AUTH msg=audit(1204371924.449:56): user pid=2963 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=AVC msg=audit(1204371929.876:57): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371929.876:57): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AUTH msg=audit(1204371935.933:58): user pid=2963 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204371935.933:59): user pid=2963 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204371936.248:60): user pid=2963 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204371989.878:61): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204371989.878:61): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372049.881:62): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372049.881:62): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372109.883:63): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372109.883:63): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372169.928:64): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372169.928:64): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372230.017:65): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372230.017:65): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372290.052:66): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372290.052:66): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372350.054:67): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372350.054:67): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372410.056:68): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372410.056:68): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372470.058:69): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372470.058:69): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372530.060:70): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372530.060:70): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372590.062:71): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372590.062:71): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372650.064:72): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372650.064:72): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372710.066:73): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372710.066:73): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372770.068:74): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372770.068:74): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_END msg=audit(1204372803.898:75): user pid=2963 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204372830.070:76): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372830.070:76): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_ACCT msg=audit(1204372861.724:77): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204372861.738:78): user pid=3089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204372861.739:79): login pid=3089 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204372861.755:80): user pid=3089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204372861.984:81): user pid=3089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204372861.985:82): user pid=3089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1204372890.072:83): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372890.072:83): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204372950.074:84): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204372950.074:84): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373010.076:85): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373010.076:85): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373070.078:86): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373070.078:86): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AUTH msg=audit(1204373107.710:87): user pid=3134 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=AVC msg=audit(1204373130.080:88): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373130.080:88): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AUTH msg=audit(1204373130.426:89): user pid=3134 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=failed)' >type=USER_AUTH msg=audit(1204373136.073:90): user pid=3134 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1204373136.082:91): user pid=3134 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_AUTH msg=audit(1204373155.203:92): user pid=3147 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1204373155.212:93): user pid=3147 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_START msg=audit(1204373155.753:94): user pid=3147 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=CRED_ACQ msg=audit(1204373155.781:95): user pid=3147 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1204373190.082:96): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373190.082:96): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373250.103:97): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373250.103:97): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373310.105:98): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373310.105:98): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373370.107:99): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373370.107:99): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373430.109:100): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373430.109:100): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_AUTH msg=audit(1204373441.172:101): user pid=3208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204373441.173:102): user pid=3208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204373441.226:103): user pid=3208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204373490.111:104): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373490.111:104): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_END msg=audit(1204373527.005:105): user pid=3208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1204373550.113:106): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373550.113:106): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373610.115:107): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373610.115:107): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=CRED_DISP msg=audit(1204373650.372:108): user pid=3147 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=USER_END msg=audit(1204373650.373:109): user pid=3147 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' >type=AVC msg=audit(1204373670.117:110): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373670.117:110): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=AVC msg=audit(1204373730.119:111): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373730.119:111): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=USER_END msg=audit(1204373772.919:112): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204373772.934:113): user pid=2352 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=AVC msg=audit(1204373790.213:114): avc: denied { connectto } for pid=2870 comm="setroubleshootd" path="/var/run/audispd_events" scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1204373790.213:114): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=b70d76d0 a2=14c118 a3=0 items=0 ppid=1 pid=2870 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) >type=DAEMON_END msg=audit(1204373794.911:3796): auditd normal halt, sending auid=4294967295 pid=3474 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204373937.346:1426): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1869 res=success >type=CONFIG_CHANGE msg=audit(1204373937.446:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204373937.446:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204373937.570:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204373937.570:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1204375273.551:9): user pid=2334 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204375273.565:10): user pid=2334 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204375274.327:11): user pid=2334 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204375274.337:12): login pid=2334 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204375274.407:13): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204375274.513:14): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204375274.515:15): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204376462.527:16): user pid=2681 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204376462.531:17): user pid=2681 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204376462.534:18): login pid=2681 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204376462.605:19): user pid=2681 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204376462.777:20): user pid=2681 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204376462.779:21): user pid=2681 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204379817.115:22): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204379817.116:23): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204379855.675:24): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204379855.686:25): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204379855.687:26): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204379855.691:27): login pid=2334 uid=0 old auid=500 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1204379855.832:28): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204379855.976:29): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204379855.980:30): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204379987.016:31): user pid=3084 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204379987.019:32): user pid=3084 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204379987.209:33): user pid=3084 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204380062.387:34): user pid=3269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204380062.390:35): user pid=3269 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204380062.393:36): login pid=3269 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204380062.402:37): user pid=3269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204380062.547:38): user pid=3269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204380062.549:39): user pid=3269 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204380157.734:40): user pid=3084 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204381061.591:41): user pid=3484 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204381061.594:42): user pid=3484 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204381061.801:43): user pid=3484 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204381121.190:44): user pid=3484 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204382053.227:45): user pid=3649 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204382053.228:46): user pid=3649 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204382053.336:47): user pid=3649 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204382224.235:48): user pid=3649 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204382499.094:49): user pid=3713 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204382499.096:50): user pid=3713 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204382499.239:51): user pid=3713 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204382721.059:52): user pid=3713 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204382790.283:53): user pid=4403 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204382790.284:54): user pid=4403 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204382790.351:55): user pid=4403 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204383304.785:56): user pid=4403 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204383447.429:57): user pid=5764 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204383447.431:58): user pid=5764 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204383447.458:59): user pid=5764 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204383662.652:60): user pid=5832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204383662.655:61): user pid=5832 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204383662.655:62): login pid=5832 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204383662.699:63): user pid=5832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204383662.829:64): user pid=5832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204383662.830:65): user pid=5832 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204384685.493:66): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204384685.820:67): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204384726.100:68): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204384726.101:69): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204384740.676:70): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204384740.676:71): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204384748.877:72): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204384748.877:73): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204384760.754:74): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204384760.754:75): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204384782.818:76): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204384782.844:77): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204384782.845:78): user pid=2334 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204384782.848:79): login pid=2334 uid=0 old auid=0 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204384783.102:80): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204384783.185:81): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204384783.187:82): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204385235.530:83): user pid=6217 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204385235.539:84): user pid=6217 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204385235.816:85): user pid=6217 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204385235.868:86): user pid=6217 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1204385372.792:87): user pid=6217 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204385372.797:88): user pid=6217 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1204385385.175:89): user pid=6252 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204385385.177:90): user pid=6252 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204385385.397:91): user pid=6252 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204385433.740:92): user pid=6265 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204385433.743:93): user pid=6265 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204385433.778:94): user pid=6265 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204385554.513:95): user pid=6285 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204385554.517:96): user pid=6285 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204385554.542:97): user pid=6285 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204385563.824:98): user pid=6285 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204385783.100:99): user pid=6344 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204385783.103:100): user pid=6344 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204385783.142:101): user pid=6344 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204385852.305:102): user pid=6252 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204385852.894:103): user pid=5764 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204385852.950:104): user pid=6265 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204385859.052:105): user pid=6344 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204385912.779:106): user pid=6567 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204385912.780:107): user pid=6567 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204385912.813:108): user pid=6567 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204386227.694:109): user pid=6744 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204386227.694:110): user pid=6744 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204386227.814:111): user pid=6744 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204386526.938:112): user pid=6782 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204386526.948:113): user pid=6782 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204386527.069:114): user pid=6782 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204386527.072:115): user pid=6782 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204387263.024:116): user pid=6860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204387263.028:117): user pid=6860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204387263.030:118): login pid=6860 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204387263.037:119): user pid=6860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204387263.114:120): user pid=6860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204387263.117:121): user pid=6860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204387906.680:122): user pid=6888 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204387906.682:123): user pid=6888 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204387906.734:124): user pid=6888 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204387946.692:125): user pid=6888 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204387983.527:126): user pid=6915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204387983.529:127): user pid=6915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204387983.552:128): user pid=6915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204388028.841:129): user pid=6744 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204388031.179:130): user pid=6915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204390862.033:131): user pid=7263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204390862.037:132): user pid=7263 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204390862.039:133): login pid=7263 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204390862.046:134): user pid=7263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204390862.121:135): user pid=7263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204390862.125:136): user pid=7263 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204394461.163:137): user pid=7362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204394461.166:138): user pid=7362 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204394461.168:139): login pid=7362 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204394461.919:140): user pid=7362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204394461.934:141): user pid=7362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204394461.934:142): user pid=7362 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204398062.740:143): user pid=7603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204398062.742:144): user pid=7603 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204398062.742:145): login pid=7603 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204398062.749:146): user pid=7603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204398062.858:147): user pid=7603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204398062.859:148): user pid=7603 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204398407.410:149): user pid=7627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204398407.411:150): user pid=7627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204398408.440:151): user pid=7627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1204398917.976:152): user pid=6782 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204398917.979:153): user pid=6782 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204398927.686:154): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204398927.692:155): user pid=2334 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1204398930.461:156): user pid=6567 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204398930.936:157): user pid=7627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1204398935.641:158): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2274 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1204398948.164:1427): auditd normal halt, sending auid=4294967295 pid=8175 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204399089.549:1933): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1866 res=success >type=CONFIG_CHANGE msg=audit(1204399089.649:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204399089.649:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204399089.805:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204399089.806:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1204399181.786:9): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204399181.788:10): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204399190.350:11): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204399190.364:12): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204399190.366:13): user pid=2374 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204399190.374:14): login pid=2374 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204399190.471:15): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204399190.588:16): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204399190.592:17): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=CIROV02.CIROCOURT, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204399987.517:18): user pid=2670 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204399987.518:19): user pid=2670 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204399987.946:20): user pid=2670 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204400809.490:21): user pid=2897 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204400809.490:22): user pid=2897 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204400809.525:23): user pid=2897 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204400810.915:24): user pid=2897 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1204401278.654:25): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0 pid=2476 comm="pulseaudio" sig=6 >type=USER_END msg=audit(1204401282.147:26): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204401282.181:27): user pid=2374 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1204401283.649:28): user pid=2670 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1204401286.766:29): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2310 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1204401299.445:1934): auditd normal halt, sending auid=4294967295 pid=3150 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1204537976.347:3436): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1868 res=success >type=CONFIG_CHANGE msg=audit(1204537976.448:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204537976.448:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1204537976.637:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1204537976.637:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ACCT msg=audit(1204538461.957:9): user pid=2412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204538461.962:10): user pid=2412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204538461.964:11): login pid=2412 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204538461.970:12): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204538462.093:13): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204538462.096:14): user pid=2412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204542061.953:15): user pid=2520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204542061.958:16): user pid=2520 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204542061.960:17): login pid=2520 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204542061.965:18): user pid=2520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204542062.051:19): user pid=2520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204542062.053:20): user pid=2520 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204544105.401:21): user pid=2375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1204544105.402:22): user pid=2375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1204544116.565:23): user pid=2375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204544116.577:24): user pid=2375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204544116.660:25): user pid=2375 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204544116.702:26): login pid=2375 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1204544116.841:27): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204544116.900:28): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204544116.900:29): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_END msg=audit(1204544367.139:30): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204544367.901:31): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204544490.061:32): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204544490.074:33): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204544490.075:34): user pid=2375 uid=0 auid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204544490.816:35): login pid=2375 uid=0 old auid=0 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204544491.202:36): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204544491.318:37): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204544491.330:38): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204545662.304:39): user pid=4470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204545662.366:40): user pid=4470 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204545662.366:41): login pid=4470 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204545662.497:42): user pid=4470 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204545662.768:43): user pid=4470 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204545662.769:44): user pid=4470 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204546317.979:45): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204546318.143:46): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204546344.281:47): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204546344.297:48): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204546344.298:49): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204546344.301:50): login pid=2375 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204546344.461:51): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204546344.718:52): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204546344.722:53): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204546497.376:54): user pid=4799 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204546497.376:55): user pid=4799 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204546498.286:56): user pid=4799 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204547031.117:57): user pid=4799 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204549263.674:58): user pid=4979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204549263.694:59): user pid=4979 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204549263.695:60): login pid=4979 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204549263.739:61): user pid=4979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204549264.410:62): user pid=4979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204549264.410:63): user pid=4979 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204552862.716:64): user pid=5081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204552862.745:65): user pid=5081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204552862.748:66): login pid=5081 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204552862.787:67): user pid=5081 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204552863.048:68): user pid=5081 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204552863.050:69): user pid=5081 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204556462.274:70): user pid=5183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204556462.303:71): user pid=5183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204556462.305:72): login pid=5183 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204556462.344:73): user pid=5183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204556462.747:74): user pid=5183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204556462.749:75): user pid=5183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204558643.062:76): user pid=5258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204558643.062:77): user pid=5258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204558643.311:78): user pid=5258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204558732.715:79): user pid=5258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204559880.070:80): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204559880.447:81): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204559920.177:82): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204559920.189:83): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204559920.190:84): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204559920.234:85): login pid=2375 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204559920.497:86): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204559920.700:87): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204559920.702:88): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204560061.877:89): user pid=5639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204560061.925:90): user pid=5639 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204560061.926:91): login pid=5639 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204560061.968:92): user pid=5639 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204560062.456:93): user pid=5639 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204560062.457:94): user pid=5639 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204560085.851:95): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204560085.901:96): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204560124.284:97): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1204560124.297:98): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1204560124.298:99): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1204560124.302:100): login pid=2375 uid=0 old auid=500 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1204560124.489:101): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204560124.572:102): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1204560124.575:103): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1204560884.837:104): user pid=5932 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204560884.837:105): user pid=5932 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204560885.211:106): user pid=5932 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1204561130.460:107): user pid=5949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204561130.461:108): user pid=5949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204561131.185:109): user pid=5949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204561219.452:110): user pid=5932 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204561251.263:111): user pid=5949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204563662.725:112): user pid=6110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204563662.744:113): user pid=6110 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204563662.745:114): login pid=6110 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204563662.819:115): user pid=6110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204563663.432:116): user pid=6110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204563663.432:117): user pid=6110 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204567262.287:118): user pid=6210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204567262.290:119): user pid=6210 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204567262.293:120): login pid=6210 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204567262.298:121): user pid=6210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204567262.538:122): user pid=6210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204567262.540:123): user pid=6210 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204570862.372:124): user pid=6310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204570862.375:125): user pid=6310 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204570862.378:126): login pid=6310 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204570862.383:127): user pid=6310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204570862.538:128): user pid=6310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204570862.540:129): user pid=6310 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204574462.415:130): user pid=6410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204574462.418:131): user pid=6410 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204574462.421:132): login pid=6410 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204574462.442:133): user pid=6410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204574462.595:134): user pid=6410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204574462.598:135): user pid=6410 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204578062.457:136): user pid=6510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204578062.461:137): user pid=6510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204578062.464:138): login pid=6510 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204578062.470:139): user pid=6510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204578062.679:140): user pid=6510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204578062.682:141): user pid=6510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204581662.521:142): user pid=6613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204581662.524:143): user pid=6613 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204581662.527:144): login pid=6613 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204581662.533:145): user pid=6613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204581662.715:146): user pid=6613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204581662.718:147): user pid=6613 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204585261.753:148): user pid=6713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204585261.757:149): user pid=6713 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204585261.759:150): login pid=6713 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204585261.763:151): user pid=6713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204585261.779:152): user pid=6713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204585261.781:153): user pid=6713 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204588861.815:154): user pid=6813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204588861.818:155): user pid=6813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204588861.820:156): login pid=6813 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204588861.825:157): user pid=6813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204588861.840:158): user pid=6813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204588861.843:159): user pid=6813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204592462.804:160): user pid=6915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204592462.830:161): user pid=6915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204592462.832:162): login pid=6915 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204592462.837:163): user pid=6915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204592463.214:164): user pid=6915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204592463.216:165): user pid=6915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204596062.244:166): user pid=7015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204596062.247:167): user pid=7015 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204596062.249:168): login pid=7015 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204596062.260:169): user pid=7015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204596062.661:170): user pid=7015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204596062.663:171): user pid=7015 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204596121.681:172): user pid=7020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204596121.685:173): user pid=7020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204596121.687:174): login pid=7020 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204596121.693:175): user pid=7020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204597230.969:176): user pid=7020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204597230.972:177): user pid=7020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204599662.655:178): user pid=7702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204599662.686:179): user pid=7702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204599662.688:180): login pid=7702 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204599662.709:181): user pid=7702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204599663.229:182): user pid=7702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204599663.232:183): user pid=7702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204603262.103:184): user pid=7802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204603262.106:185): user pid=7802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204603262.108:186): login pid=7802 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204603262.114:187): user pid=7802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204603262.254:188): user pid=7802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204603262.257:189): user pid=7802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204606862.292:190): user pid=7902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204606862.312:191): user pid=7902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204606862.314:192): login pid=7902 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204606862.335:193): user pid=7902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204606862.586:194): user pid=7902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204606862.588:195): user pid=7902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204610462.447:196): user pid=8002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204610462.451:197): user pid=8002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204610462.454:198): login pid=8002 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204610462.459:199): user pid=8002 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204610462.698:200): user pid=8002 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204610462.700:201): user pid=8002 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204614062.686:202): user pid=8102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204614062.706:203): user pid=8102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204614062.709:204): login pid=8102 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204614062.715:205): user pid=8102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204614062.965:206): user pid=8102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204614062.968:207): user pid=8102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204617662.867:208): user pid=8202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204617662.870:209): user pid=8202 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204617662.872:210): login pid=8202 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204617662.877:211): user pid=8202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204617663.089:212): user pid=8202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204617663.091:213): user pid=8202 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204621262.100:214): user pid=8302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204621262.120:215): user pid=8302 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204621262.122:216): login pid=8302 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204621262.129:217): user pid=8302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204621262.350:218): user pid=8302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204621262.353:219): user pid=8302 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204624862.407:220): user pid=8402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204624862.410:221): user pid=8402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204624862.412:222): login pid=8402 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204624862.418:223): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204624862.726:224): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204624862.728:225): user pid=8402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204628462.594:226): user pid=8502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204628462.598:227): user pid=8502 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204628462.601:228): login pid=8502 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204628462.607:229): user pid=8502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204628462.816:230): user pid=8502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204628462.819:231): user pid=8502 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204632062.676:232): user pid=8602 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204632062.679:233): user pid=8602 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204632062.681:234): login pid=8602 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204632062.695:235): user pid=8602 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204632062.827:236): user pid=8602 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204632062.830:237): user pid=8602 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204635663.025:238): user pid=8702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204635663.055:239): user pid=8702 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204635663.057:240): login pid=8702 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204635663.064:241): user pid=8702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204635663.513:242): user pid=8702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204635663.515:243): user pid=8702 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204639262.389:244): user pid=8802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204639262.392:245): user pid=8802 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204639262.395:246): login pid=8802 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204639262.401:247): user pid=8802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204639262.611:248): user pid=8802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204639262.614:249): user pid=8802 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204641547.453:250): user pid=8873 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204641547.453:251): user pid=8873 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204641547.779:252): user pid=8873 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204641634.299:253): user pid=8873 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204642862.993:254): user pid=8921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204642863.027:255): user pid=8921 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204642863.029:256): login pid=8921 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204642863.049:257): user pid=8921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204642863.513:258): user pid=8921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204642863.516:259): user pid=8921 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204646462.475:260): user pid=9021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204646462.479:261): user pid=9021 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204646462.481:262): login pid=9021 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204646462.488:263): user pid=9021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204646462.764:264): user pid=9021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204646462.767:265): user pid=9021 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204650062.703:266): user pid=9121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204650062.707:267): user pid=9121 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204650062.710:268): login pid=9121 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204650062.715:269): user pid=9121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204650062.968:270): user pid=9121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204650062.970:271): user pid=9121 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204653662.931:272): user pid=9221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204653662.966:273): user pid=9221 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204653662.968:274): login pid=9221 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204653662.974:275): user pid=9221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204653663.267:276): user pid=9221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204653663.269:277): user pid=9221 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204657262.178:278): user pid=9321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204657262.181:279): user pid=9321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204657262.184:280): login pid=9321 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204657262.189:281): user pid=9321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204657262.343:282): user pid=9321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204657262.346:283): user pid=9321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1204660862.186:284): user pid=9421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204660862.189:285): user pid=9421 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204660862.191:286): login pid=9421 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204660862.196:287): user pid=9421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204660862.337:288): user pid=9421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204660862.339:289): user pid=9421 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204662887.019:290): user pid=9533 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204662887.019:291): user pid=9533 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1204662887.178:292): user pid=9533 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1204664058.969:293): user pid=9533 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1204664462.247:294): user pid=9689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204664462.281:295): user pid=9689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204664462.282:296): login pid=9689 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204664462.309:297): user pid=9689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204664462.498:298): user pid=9689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204664462.500:299): user pid=9689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1204667124.535:300): user pid=9892 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204667124.544:301): user pid=9892 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204667124.771:302): user pid=9892 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204667124.799:303): user pid=9892 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1204667160.301:304): user pid=9892 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204667160.302:305): user pid=9892 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1204667176.580:306): user pid=9958 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204667176.591:307): user pid=9958 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1204667176.615:308): user pid=9958 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1204667176.616:309): user pid=9958 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1204668062.887:310): user pid=10052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1204668062.962:311): user pid=10052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1204668062.964:312): login pid=10052 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1204668062.972:313): user pid=10052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204668063.277:314): user pid=10052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1204668063.280:315): user pid=10052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1204669221.884:316): user pid=9958 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204669221.955:317): user pid=9958 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1204669258.188:318): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1204669258.189:319): user pid=2375 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1204669288.791:3437): auditd normal halt, sending auid=4294967295 pid=10355 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1205962461.316:7142): auditd start, ver=1.6.5 format=raw kernel=2.6.23.15-137.fc8 auid=4294967295 pid=1871 res=success >type=CONFIG_CHANGE msg=audit(1205962461.423:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1205962461.423:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1205962461.562:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1205962461.562:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ACCT msg=audit(1205964062.315:9): user pid=2453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205964062.319:10): user pid=2453 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205964062.322:11): login pid=2453 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205964062.330:12): user pid=2453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205964062.451:13): user pid=2453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205964062.453:14): user pid=2453 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205967662.374:15): user pid=5198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205967662.378:16): user pid=5198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205967662.380:17): login pid=5198 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205967662.408:18): user pid=5198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205967662.454:19): user pid=5198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205967662.457:20): user pid=5198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205971262.262:21): user pid=8590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205971262.266:22): user pid=8590 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205971262.268:23): login pid=8590 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205971262.274:24): user pid=8590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205971262.291:25): user pid=8590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205971262.293:26): user pid=8590 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205974861.330:27): user pid=8690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205974861.333:28): user pid=8690 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205974861.335:29): login pid=8690 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205974861.341:30): user pid=8690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205974861.357:31): user pid=8690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205974861.359:32): user pid=8690 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205978461.395:33): user pid=8790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205978461.399:34): user pid=8790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205978461.401:35): login pid=8790 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205978461.405:36): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205978461.421:37): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205978461.424:38): user pid=8790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205978521.441:39): user pid=8795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205978521.445:40): user pid=8795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205978521.447:41): login pid=8795 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205978521.451:42): user pid=8795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205979537.161:43): user pid=8795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205979537.165:44): user pid=8795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205982061.200:45): user pid=9098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205982061.203:46): user pid=9098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205982061.205:47): login pid=9098 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205982061.211:48): user pid=9098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205982061.228:49): user pid=9098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205982061.230:50): user pid=9098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205985661.266:51): user pid=9198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205985661.270:52): user pid=9198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205985661.272:53): login pid=9198 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205985661.278:54): user pid=9198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205985661.294:55): user pid=9198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205985661.296:56): user pid=9198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205989261.332:57): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205989261.336:58): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205989261.338:59): login pid=9298 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205989261.342:60): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205989261.358:61): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205989261.360:62): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205992861.396:63): user pid=9398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205992861.400:64): user pid=9398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205992861.402:65): login pid=9398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205992861.405:66): user pid=9398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205992861.419:67): user pid=9398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205992861.419:68): user pid=9398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1205996461.454:69): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1205996461.457:70): user pid=9498 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1205996461.459:71): login pid=9498 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1205996461.465:72): user pid=9498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1205996461.480:73): user pid=9498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1205996461.483:74): user pid=9498 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206000061.519:75): user pid=9598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206000061.522:76): user pid=9598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206000061.524:77): login pid=9598 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206000061.530:78): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206000061.545:79): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206000061.548:80): user pid=9598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206003661.584:81): user pid=9698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206003661.587:82): user pid=9698 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206003661.589:83): login pid=9698 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206003661.595:84): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206003661.610:85): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206003661.611:86): user pid=9698 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206004029.596:87): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206004029.609:88): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206004029.649:89): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206004029.681:90): login pid=2386 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206004029.960:91): user pid=2386 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206004030.165:92): user pid=2386 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206004030.167:93): user pid=2386 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206007262.792:94): user pid=10096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206007262.795:95): user pid=10096 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206007262.796:96): login pid=10096 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206007262.818:97): user pid=10096 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206007263.039:98): user pid=10096 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206007263.040:99): user pid=10096 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206010861.075:100): user pid=10198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206010861.078:101): user pid=10198 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206010861.080:102): login pid=10198 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206010861.086:103): user pid=10198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206010861.103:104): user pid=10198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206010861.105:105): user pid=10198 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206014461.139:106): user pid=10300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206014461.143:107): user pid=10300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206014461.145:108): login pid=10300 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206014461.149:109): user pid=10300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206014461.164:110): user pid=10300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206014461.167:111): user pid=10300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206018061.203:112): user pid=10402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206018061.206:113): user pid=10402 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206018061.208:114): login pid=10402 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206018061.214:115): user pid=10402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206018061.230:116): user pid=10402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206018061.232:117): user pid=10402 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206021662.847:118): user pid=10504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206021662.848:119): user pid=10504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206021662.849:120): login pid=10504 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206021662.883:121): user pid=10504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206021663.245:122): user pid=10504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206021663.247:123): user pid=10504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206025262.501:124): user pid=10606 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206025262.530:125): user pid=10606 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206025262.532:126): login pid=10606 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206025262.562:127): user pid=10606 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206025262.959:128): user pid=10606 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206025262.962:129): user pid=10606 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206028862.819:130): user pid=10708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206028862.822:131): user pid=10708 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206028862.824:132): login pid=10708 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206028862.829:133): user pid=10708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206028862.870:134): user pid=10708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206028862.873:135): user pid=10708 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206032463.253:136): user pid=10810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206032463.278:137): user pid=10810 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206032463.280:138): login pid=10810 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206032463.309:139): user pid=10810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206032463.608:140): user pid=10810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206032463.610:141): user pid=10810 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206036062.498:142): user pid=10912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206036062.501:143): user pid=10912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206036062.504:144): login pid=10912 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206036062.510:145): user pid=10912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206036062.592:146): user pid=10912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206036062.595:147): user pid=10912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206039662.685:148): user pid=11014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206039662.762:149): user pid=11014 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206039662.764:150): login pid=11014 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206039662.772:151): user pid=11014 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206039662.901:152): user pid=11014 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206039662.904:153): user pid=11014 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206043262.748:154): user pid=11116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206043262.751:155): user pid=11116 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206043262.753:156): login pid=11116 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206043262.774:157): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206043262.789:158): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206043262.792:159): user pid=11116 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206046862.831:160): user pid=11218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206046862.908:161): user pid=11218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206046862.911:162): login pid=11218 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206046862.918:163): user pid=11218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206046863.104:164): user pid=11218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206046863.106:165): user pid=11218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206050462.471:166): user pid=11320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206050462.474:167): user pid=11320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206050462.476:168): login pid=11320 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206050462.483:169): user pid=11320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206050462.535:170): user pid=11320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206050462.538:171): user pid=11320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206054062.600:172): user pid=11422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206054062.620:173): user pid=11422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206054062.622:174): login pid=11422 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206054062.628:175): user pid=11422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206054062.744:176): user pid=11422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206054062.746:177): user pid=11422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206057662.652:178): user pid=11524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206057662.657:179): user pid=11524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206057662.659:180): login pid=11524 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206057662.665:181): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206057662.680:182): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206057662.682:183): user pid=11524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206061262.755:184): user pid=11626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206061262.775:185): user pid=11626 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206061262.777:186): login pid=11626 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206061262.783:187): user pid=11626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206061262.886:188): user pid=11626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206061262.889:189): user pid=11626 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206064862.756:190): user pid=11728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206064862.760:191): user pid=11728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206064862.762:192): login pid=11728 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206064862.769:193): user pid=11728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206064862.784:194): user pid=11728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206064862.786:195): user pid=11728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206064921.804:196): user pid=11733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206064921.807:197): user pid=11733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206064921.810:198): login pid=11733 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206064921.814:199): user pid=11733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206065968.829:200): user pid=11733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206065968.831:201): user pid=11733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206068462.350:202): user pid=12332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206068462.380:203): user pid=12332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206068462.382:204): login pid=12332 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206068462.403:205): user pid=12332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206068462.682:206): user pid=12332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206068462.685:207): user pid=12332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206072062.754:208): user pid=12434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206072062.757:209): user pid=12434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206072062.759:210): login pid=12434 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206072062.769:211): user pid=12434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206072063.042:212): user pid=12434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206072063.044:213): user pid=12434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206075662.090:214): user pid=12536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206075662.110:215): user pid=12536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206075662.112:216): login pid=12536 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206075662.130:217): user pid=12536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206075662.312:218): user pid=12536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206075662.314:219): user pid=12536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206079262.561:220): user pid=12638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206079262.564:221): user pid=12638 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206079262.566:222): login pid=12638 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206079262.592:223): user pid=12638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206079262.831:224): user pid=12638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206079262.833:225): user pid=12638 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206082863.088:226): user pid=12740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206082863.117:227): user pid=12740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206082863.119:228): login pid=12740 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206082863.151:229): user pid=12740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206082863.433:230): user pid=12740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206082863.435:231): user pid=12740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206086462.421:232): user pid=12842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206086462.424:233): user pid=12842 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206086462.426:234): login pid=12842 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206086462.471:235): user pid=12842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206086462.653:236): user pid=12842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206086462.655:237): user pid=12842 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206090062.890:238): user pid=12944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206090062.919:239): user pid=12944 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206090062.921:240): login pid=12944 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206090062.953:241): user pid=12944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206090063.363:242): user pid=12944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206090063.365:243): user pid=12944 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206093662.426:244): user pid=13047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206093662.430:245): user pid=13047 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206093662.432:246): login pid=13047 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206093662.461:247): user pid=13047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206093662.629:248): user pid=13047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206093662.631:249): user pid=13047 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206097262.529:250): user pid=13149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206097262.532:251): user pid=13149 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206097262.534:252): login pid=13149 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206097262.540:253): user pid=13149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206097262.580:254): user pid=13149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206097262.583:255): user pid=13149 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206100862.636:256): user pid=13251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206100862.671:257): user pid=13251 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206100862.673:258): login pid=13251 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206100862.678:259): user pid=13251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206100862.781:260): user pid=13251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206100862.784:261): user pid=13251 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206103282.627:262): user pid=13347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206103282.627:263): user pid=13347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206103283.179:264): user pid=13347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206103698.299:265): user pid=13544 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206103698.306:266): user pid=13544 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206103699.068:267): user pid=13544 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206103699.138:268): user pid=13544 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206104462.232:269): user pid=13686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206104462.328:270): user pid=13686 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206104462.329:271): login pid=13686 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206104462.448:272): user pid=13686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206104462.846:273): user pid=13686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206104462.850:274): user pid=13686 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_CHAUTHTOK msg=audit(1206105085.604:275): user pid=16373 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=haldaemon exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1206105241.533:276): user pid=16482 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=smolt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1206105242.210:277): user pid=16486 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=smolt exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_POLICY_LOAD msg=audit(1206105427.749:278): policy loaded auid=500 >type=SYSCALL msg=audit(1206105427.749:278): arch=40000003 syscall=4 success=yes exit=4103310 a0=4 a1=b7b68000 a2=3e9c8e a3=bff9cab8 items=0 ppid=16508 pid=16516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null) >type=USER_AVC msg=audit(1206105433.863:279): user pid=1887 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=DAEMON_END msg=audit(1206105882.226:7143): auditd normal halt, sending auid=500 pid=16693 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206105884.869:5888): auditd start, ver=1.6.8 format=raw kernel=2.6.23.15-137.fc8 auid=500 pid=16710 res=success >type=CONFIG_CHANGE msg=audit(1206105884.969:282): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206105884.969:283): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1206105885.118:284): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206105885.118:285): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=USER_ROLE_CHANGE msg=audit(1206106021.186:286): user pid=16840 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1206106029.447:287): user pid=16842 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1206106112.797:288): user pid=16844 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1206106125.527:289): user pid=16862 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1206106133.656:290): user pid=16864 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ROLE_CHANGE msg=audit(1206106205.997:291): user pid=16865 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=? res=failed)' >type=USER_END msg=audit(1206106464.668:292): user pid=13347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206106889.973:293): user pid=13544 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206106890.748:294): user pid=13544 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206106905.015:295): user pid=2386 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206106905.196:296): user pid=2386 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1206106936.742:5889): auditd normal halt, sending auid=4294967295 pid=17203 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206107081.651:2652): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=1903 res=success >type=CONFIG_CHANGE msg=audit(1206107081.757:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206107081.757:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206107081.914:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206107081.914:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1206107144.326:9): user pid=2410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206107144.348:10): user pid=2410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206107144.365:11): user pid=2410 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206107144.377:12): login pid=2410 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206107144.473:13): user pid=2410 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206107144.586:14): user pid=2410 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206107144.589:15): user pid=2410 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206107239.193:16): user pid=2699 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1206107239.203:17): user pid=2699 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1206107240.515:18): user pid=2699 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1206107240.573:19): user pid=2699 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1206107451.487:20): user pid=2848 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206107451.490:21): user pid=2848 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206107451.662:22): user pid=2848 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206108062.363:23): user pid=2872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206108062.441:24): user pid=2872 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206108062.442:25): login pid=2872 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206108062.529:26): user pid=2872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206108063.146:27): user pid=2872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206108063.149:28): user pid=2872 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206110596.744:29): user pid=3062 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1206110613.061:30): user pid=3066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206110613.063:31): user pid=3066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206110613.234:32): user pid=3066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206110646.392:33): user pid=2848 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206110654.938:34): user pid=3066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206110943.919:35): user pid=3273 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206110943.923:36): user pid=3273 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206110944.000:37): user pid=3273 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206111045.958:38): user pid=3273 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206111056.166:39): user pid=2699 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1206111056.380:40): user pid=2699 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1206111085.052:41): user pid=2410 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206111085.054:42): user pid=2410 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1206111109.153:2653): auditd normal halt, sending auid=4294967295 pid=3541 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206111259.516:1986): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=1907 res=success >type=CONFIG_CHANGE msg=audit(1206111259.622:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206111259.622:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206111259.805:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206111259.805:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ACCT msg=audit(1206111662.877:9): user pid=2449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206111662.882:10): user pid=2449 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206111662.884:11): login pid=2449 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206111662.892:12): user pid=2449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206111663.004:13): user pid=2449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206111663.006:14): user pid=2449 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206112125.737:15): user pid=2414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206112125.758:16): user pid=2414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206112126.474:17): user pid=2414 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206112126.484:18): login pid=2414 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206112126.576:19): user pid=2414 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206112126.686:20): user pid=2414 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206112126.689:21): user pid=2414 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206112409.828:22): user pid=2845 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206112409.834:23): user pid=2845 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206112410.379:24): user pid=2845 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206112448.556:25): user pid=2845 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206112456.026:26): user pid=2872 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206112456.028:27): user pid=2872 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206112456.048:28): user pid=2872 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206112814.119:29): user pid=2872 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206112839.329:30): user pid=3325 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206112839.339:31): user pid=3325 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206112994.457:32): user pid=3367 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206112994.460:33): user pid=3367 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206112994.522:34): user pid=3367 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206113209.872:35): user pid=3561 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206113209.875:36): user pid=3561 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206113209.898:37): user pid=3561 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206113480.299:38): user pid=3561 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206113609.931:39): user pid=3606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206113609.942:40): user pid=3606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206113610.004:41): user pid=3606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206114234.589:42): user pid=3606 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206115262.141:43): user pid=4337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206115262.146:44): user pid=4337 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206115262.148:45): login pid=4337 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206115262.208:46): user pid=4337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206115262.285:47): user pid=4337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206115262.288:48): user pid=4337 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206115488.417:49): user pid=3367 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206115732.184:50): user pid=2414 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206115732.187:51): user pid=2414 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1206115738.995:52): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2354 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1206115748.505:1987): auditd normal halt, sending auid=4294967295 pid=4928 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206119039.455:5831): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=1914 res=success >type=CONFIG_CHANGE msg=audit(1206119039.562:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206119039.562:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206119039.731:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206119039.731:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1206119096.372:9): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206119096.393:10): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206119096.397:11): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206119096.410:12): login pid=2420 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206119096.502:13): user pid=2420 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206119096.612:14): user pid=2420 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206119096.615:15): user pid=2420 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206119214.322:16): user pid=2709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206119214.323:17): user pid=2709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206119215.006:18): user pid=2709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206119248.484:19): user pid=2709 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206119348.479:20): user pid=2742 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206119348.479:21): user pid=2742 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206119348.792:22): user pid=2742 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206119485.961:23): user pid=2777 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206119485.986:24): user pid=2777 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206119486.651:25): user pid=2777 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206119486.674:26): user pid=2777 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1206120158.538:27): user pid=2777 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206120158.775:28): user pid=2777 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206120181.766:29): user pid=2806 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206120181.777:30): user pid=2806 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206120182.150:31): user pid=2806 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206120182.152:32): user pid=2806 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CHAUTHTOK msg=audit(1206120579.833:33): user pid=2860 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=ccache exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206121993.755:34): user pid=2742 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206122095.042:35): user pid=3612 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206122095.045:36): user pid=3612 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206122095.252:37): user pid=3612 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206122111.711:38): user pid=3612 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206122461.808:39): user pid=3658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206122461.811:40): user pid=3658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206122461.811:41): login pid=3658 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206122461.846:42): user pid=3658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206122462.030:43): user pid=3658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206122462.033:44): user pid=3658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206122477.204:45): user pid=3665 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206122477.206:46): user pid=3665 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206122477.313:47): user pid=3665 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206124445.388:48): user pid=3665 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206126063.147:49): user pid=4501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206126063.151:50): user pid=4501 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206126063.151:51): login pid=4501 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206126063.206:52): user pid=4501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206126063.469:53): user pid=4501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206126063.472:54): user pid=4501 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206129661.769:55): user pid=4637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206129661.800:56): user pid=4637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206129661.801:57): login pid=4637 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206129661.871:58): user pid=4637 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206129661.942:59): user pid=4637 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206129661.943:60): user pid=4637 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206130214.641:61): user pid=4712 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206130214.644:62): user pid=4712 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206130215.057:63): user pid=4712 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206130229.738:64): user pid=4705 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206130229.741:65): user pid=4705 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206130229.862:66): user pid=4705 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206130278.946:67): user pid=4705 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1206131381.942:68): user pid=4810 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=jackuser exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206131591.309:69): user pid=4712 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206132118.912:70): user pid=4946 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206132118.915:71): user pid=4946 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206132119.200:72): user pid=4946 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206132463.206:73): user pid=2806 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206132463.437:74): user pid=2806 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206132512.141:75): user pid=4946 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206132573.372:76): user pid=2420 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206132573.524:77): user pid=2420 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1206132597.288:5832): auditd normal halt, sending auid=4294967295 pid=5440 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206132803.179:6300): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=2082 res=success >type=CONFIG_CHANGE msg=audit(1206132803.287:7): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206132803.287:8): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206132803.413:9): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206132803.413:10): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1206132852.955:11): user pid=2604 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206132852.978:12): user pid=2604 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206132852.982:13): user pid=2604 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206132852.996:14): login pid=2604 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206132853.111:15): user pid=2604 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206132853.220:16): user pid=2604 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206132853.223:17): user pid=2604 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206133244.039:18): user pid=2907 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ACCT msg=audit(1206133262.084:19): user pid=2912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206133262.089:20): user pid=2912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206133262.092:21): login pid=2912 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206133262.173:22): user pid=2912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206133262.343:23): user pid=2912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206133262.343:24): user pid=2912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206133275.371:25): user pid=2915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206133275.389:26): user pid=2915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206133275.653:27): user pid=2915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206133275.679:28): user pid=2915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1206133275.695:29): user pid=2915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206133275.705:30): user pid=2915 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206133321.160:31): user pid=3035 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206133321.162:32): user pid=3035 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206133321.298:33): user pid=3035 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206133430.103:34): user pid=3035 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206133572.321:35): user pid=3267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206133572.342:36): user pid=3267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206133572.385:37): user pid=3267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206133572.387:38): user pid=3267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1206133572.403:39): user pid=3267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206133572.406:40): user pid=3267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206133618.108:41): user pid=3275 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206133618.134:42): user pid=3275 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206133618.177:43): user pid=3275 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206133618.179:44): user pid=3275 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1206133618.210:45): user pid=3275 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206133618.221:46): user pid=3275 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206133872.532:47): user pid=3520 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206133872.534:48): user pid=3520 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206133872.571:49): user pid=3520 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206134641.563:50): user pid=3520 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206134663.845:51): avc: denied { search } for pid=4146 comm="ip" name="phy1" dev=debugfs ino=23001 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206134663.845:51): arch=40000003 syscall=54 success=yes exit=0 a0=4 a1=8923 a2=bfbf4e14 a3=bfbf4e14 items=0 ppid=4057 pid=4146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ip" exe="/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1206134664.510:52): avc: denied { search } for pid=4184 comm="iwconfig" name="keys" dev=debugfs ino=23004 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206134664.510:52): avc: denied { search } for pid=4184 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=23050 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206134664.510:52): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bf86c4f8 a3=bf86c630 items=0 ppid=4057 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=USER_AUTH msg=audit(1206134792.196:53): user pid=4258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206134792.219:54): user pid=4258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206134792.277:55): user pid=4258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206134792.280:56): user pid=4258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206135496.614:57): user pid=4326 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1206135526.570:58): user pid=4331 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206135526.573:59): user pid=4331 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206135527.297:60): user pid=4331 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206135662.075:61): user pid=4381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206135662.075:62): user pid=4381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206135662.758:63): user pid=4381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206135734.675:64): avc: denied { search } for pid=4972 comm="iwconfig" name="keys" dev=debugfs ino=23004 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206135734.675:64): avc: denied { search } for pid=4972 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=23050 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206135734.675:64): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bf9946c8 a3=bf994800 items=0 ppid=4933 pid=4972 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=AVC msg=audit(1206136148.605:65): avc: denied { search } for pid=5873 comm="iwconfig" name="keys" dev=debugfs ino=23004 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206136148.605:65): avc: denied { search } for pid=5873 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=23050 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206136148.605:65): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bf9ab6d8 a3=bf9ab810 items=0 ppid=5833 pid=5873 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=USER_AUTH msg=audit(1206136205.661:66): user pid=5978 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206136205.665:67): user pid=5978 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206136206.371:68): user pid=5978 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206136862.900:69): user pid=6011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206136862.937:70): user pid=6011 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206136862.938:71): login pid=6011 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206136863.019:72): user pid=6011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206136863.257:73): user pid=6011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206136863.260:74): user pid=6011 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206137036.167:75): user pid=4331 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206137259.817:76): user pid=5978 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206137278.904:77): user pid=6213 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206137278.906:78): user pid=6213 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206137279.123:79): user pid=6213 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206137556.782:80): user pid=4258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206137556.803:81): user pid=4258 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206137572.978:82): user pid=6254 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206137572.981:83): user pid=6254 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206137573.006:84): user pid=6254 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1206137620.502:85): user pid=6293 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206137621.843:86): user pid=6254 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206137643.910:87): avc: denied { search } for pid=6809 comm="iwconfig" name="keys" dev=debugfs ino=23004 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206137643.910:87): avc: denied { search } for pid=6809 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=23050 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206137643.910:87): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bfa32f68 a3=bfa330a0 items=0 ppid=6770 pid=6809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=USER_AUTH msg=audit(1206137662.050:88): user pid=6913 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206137662.053:89): user pid=6913 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206137662.077:90): user pid=6913 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206137677.658:91): user pid=4381 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206137681.875:92): user pid=6213 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206137710.182:93): user pid=6921 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206137710.185:94): user pid=6921 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206137710.208:95): user pid=6921 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206137729.635:96): user pid=6921 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206137737.052:97): user pid=6913 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206137745.782:98): user pid=6949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206137745.785:99): user pid=6949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206137745.809:100): user pid=6949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206138057.369:101): user pid=6949 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206138150.173:102): user pid=7002 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206138150.183:103): user pid=7002 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206138150.574:104): user pid=7002 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206138150.578:105): user pid=7002 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1206138151.199:106): user pid=7002 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206138151.199:107): user pid=7002 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206138231.228:108): user pid=7063 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206138231.238:109): user pid=7063 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206138231.266:110): user pid=7063 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206138231.269:111): user pid=7063 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1206138727.235:112): avc: denied { search } for pid=7992 comm="ip" name="phy2" dev=debugfs ino=59729 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206138727.235:112): arch=40000003 syscall=54 success=yes exit=0 a0=4 a1=8923 a2=bff9a9a4 a3=bff9a9a4 items=0 ppid=7909 pid=7992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ip" exe="/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1206138728.097:113): avc: denied { search } for pid=8026 comm="iwconfig" name="keys" dev=debugfs ino=59732 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206138728.097:113): avc: denied { search } for pid=8026 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=59778 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206138728.097:113): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bf8d34f8 a3=bf8d3630 items=0 ppid=7909 pid=8026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1206140454.478:114): avc: denied { search } for pid=8744 comm="ip" name="phy3" dev=debugfs ino=61619 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206140454.478:114): arch=40000003 syscall=54 success=yes exit=0 a0=4 a1=8923 a2=bfedd0f4 a3=bfedd0f4 items=0 ppid=8646 pid=8744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ip" exe="/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1206140455.206:115): avc: denied { search } for pid=8784 comm="iwconfig" name="keys" dev=debugfs ino=61622 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206140455.206:115): avc: denied { search } for pid=8784 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=61668 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206140455.206:115): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bfd36d98 a3=bfd36ed0 items=0 ppid=8646 pid=8784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1206140462.111:116): user pid=8846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206140462.115:117): user pid=8846 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206140462.119:118): login pid=8846 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206140462.156:119): user pid=8846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206140462.291:120): user pid=8846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206140462.291:121): user pid=8846 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206140464.506:122): user pid=8533 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1206140505.062:123): user pid=8853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206140505.065:124): user pid=8853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206140505.334:125): user pid=8853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206140521.664:126): user pid=8883 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206140521.667:127): user pid=8883 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206140521.690:128): user pid=8883 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206140573.753:129): avc: denied { search } for pid=9525 comm="iwconfig" name="keys" dev=debugfs ino=61622 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206140573.753:129): avc: denied { search } for pid=9525 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=61668 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206140573.753:129): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bfe23b58 a3=bfe23c90 items=0 ppid=9486 pid=9525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=AVC msg=audit(1206140665.548:130): avc: denied { search } for pid=10238 comm="iwconfig" name="keys" dev=debugfs ino=61622 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206140665.548:130): avc: denied { search } for pid=10238 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=61668 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206140665.548:130): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bffead18 a3=bffeae50 items=0 ppid=10199 pid=10238 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=USER_END msg=audit(1206140725.494:131): user pid=8883 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206140730.328:132): user pid=8853 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206140860.904:133): user pid=7063 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206140860.905:134): user pid=7063 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206140875.312:135): user pid=2604 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206140875.772:136): user pid=2604 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_START msg=audit(1206186464.280:5268): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=2106 res=success >type=CONFIG_CHANGE msg=audit(1206186464.387:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206186464.387:9): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206186464.529:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206186464.529:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_ACCT msg=audit(1206187261.973:12): user pid=2675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206187261.978:13): user pid=2675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206187261.980:14): login pid=2675 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206187261.991:15): user pid=2675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206187262.113:16): user pid=2675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206187262.115:17): user pid=2675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206187272.674:18): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206187272.693:19): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206187273.412:20): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206187273.425:21): login pid=2629 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206187273.606:22): user pid=2629 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206187273.725:23): user pid=2629 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206187273.728:24): user pid=2629 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206187382.632:25): user pid=2950 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206187382.642:26): user pid=2950 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206187383.045:27): user pid=2950 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206187383.048:28): user pid=2950 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206189340.978:29): user pid=3881 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206189340.980:30): user pid=3881 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206189342.202:31): user pid=3881 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206190862.442:32): user pid=4211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206190862.446:33): user pid=4211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206190862.447:34): login pid=4211 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206190862.495:35): user pid=4211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206190862.608:36): user pid=4211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206190862.610:37): user pid=4211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206194462.426:38): user pid=19952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206194462.430:39): user pid=19952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206194462.430:40): login pid=19952 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206194462.936:41): user pid=19952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206194462.990:42): user pid=19952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206194462.991:43): user pid=19952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206198061.064:44): user pid=20052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206198061.067:45): user pid=20052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206198061.069:46): login pid=20052 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206198061.077:47): user pid=20052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206198061.095:48): user pid=20052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206198061.095:49): user pid=20052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206201661.134:50): user pid=20152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206201661.137:51): user pid=20152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206201661.139:52): login pid=20152 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206201661.148:53): user pid=20152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206201661.163:54): user pid=20152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206201661.166:55): user pid=20152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206205261.202:56): user pid=20253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206205261.206:57): user pid=20253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206205261.208:58): login pid=20253 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206205261.216:59): user pid=20253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206205261.234:60): user pid=20253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206205261.236:61): user pid=20253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206207982.169:62): user pid=20347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206207982.173:63): user pid=20347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206207982.375:64): user pid=20347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206208255.253:65): user pid=20347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206208861.334:66): user pid=21281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206208861.354:67): user pid=21281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206208861.357:68): login pid=21281 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206208861.416:69): user pid=21281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206208861.445:70): user pid=21281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206208861.446:71): user pid=21281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206209008.500:72): user pid=3881 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206209677.503:73): user pid=21347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206209677.506:74): user pid=21347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206209677.580:75): user pid=21347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206209914.636:76): user pid=21347 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206210484.281:77): user pid=21695 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206210484.283:78): user pid=21695 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206210484.348:79): user pid=21695 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206212461.484:80): user pid=21876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206212461.488:81): user pid=21876 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206212461.491:82): login pid=21876 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206212461.499:83): user pid=21876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206212461.524:84): user pid=21876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206212461.527:85): user pid=21876 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206216061.568:86): user pid=21978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206216061.571:87): user pid=21978 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206216061.573:88): login pid=21978 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206216061.578:89): user pid=21978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206216061.593:90): user pid=21978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206216061.593:91): user pid=21978 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1206219630.015:92): avc: denied { search } for pid=23127 comm="ip" name="phy1" dev=debugfs ino=56499 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206219630.015:92): arch=40000003 syscall=54 success=yes exit=0 a0=4 a1=8923 a2=bfa39c44 a3=bfa39c44 items=0 ppid=23036 pid=23127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ip" exe="/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1206219630.599:93): avc: denied { search } for pid=23161 comm="iwconfig" name="keys" dev=debugfs ino=56502 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206219630.599:93): avc: denied { search } for pid=23161 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=56548 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206219630.599:93): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bfd21948 a3=bfd21a80 items=0 ppid=23036 pid=23161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1206219661.927:94): user pid=23241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206219661.931:95): user pid=23241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206219661.934:96): login pid=23241 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206219661.943:97): user pid=23241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206219662.067:98): user pid=23241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206219662.068:99): user pid=23241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1206219778.800:100): avc: denied { 0x100000 } for pid=23249 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206219778.800:100): arch=40000003 syscall=196 success=no exit=-13 a0=bf8b264f a1=bf8b10cc a2=2eaff4 a3=bf8b264f items=0 ppid=2957 pid=23249 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=AVC msg=audit(1206219847.693:101): avc: denied { 0x100000 } for pid=23251 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206219847.693:101): arch=40000003 syscall=196 success=no exit=-13 a0=bfb4c64f a1=bfb4befc a2=2eaff4 a3=bfb4c64f items=0 ppid=2957 pid=23251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=MAC_CONFIG_CHANGE msg=audit(1206219968.589:102): bool=use_samba_home_dirs val=1 old_val=0 auid=500 >type=SYSCALL msg=audit(1206219968.589:102): arch=40000003 syscall=4 success=yes exit=2 a0=4 a1=bf982d36 a2=2 a3=bf982d38 items=0 ppid=2957 pid=23256 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null) >type=USER_AVC msg=audit(1206219970.120:103): user pid=2122 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_END msg=audit(1206220021.485:104): user pid=21695 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206220033.365:105): avc: denied { 0x100000 } for pid=23529 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206220033.365:105): arch=40000003 syscall=196 success=no exit=-13 a0=bfeef64f a1=bfeee4fc a2=2eaff4 a3=bfeef64f items=0 ppid=2957 pid=23529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=AVC msg=audit(1206220125.635:106): avc: denied { 0x100000 } for pid=23533 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206220125.635:106): arch=40000003 syscall=196 success=no exit=-13 a0=bfe7464f a1=bfe738ec a2=2eaff4 a3=bfe7464f items=0 ppid=2957 pid=23533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=USER_AVC msg=audit(1206220225.846:107): user pid=2122 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1206220234.133:108): avc: denied { 0x100000 } for pid=23539 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206220234.133:108): arch=40000003 syscall=196 success=no exit=-13 a0=bfaa364f a1=bfaa2d1c a2=2eaff4 a3=bfaa364f items=0 ppid=2957 pid=23539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=USER_AUTH msg=audit(1206220283.151:109): user pid=23543 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206220283.160:110): user pid=23543 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206220283.412:111): user pid=23543 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=MAC_CONFIG_CHANGE msg=audit(1206220506.802:112): bool=samba_enable_home_dirs val=1 old_val=0 auid=500 >type=USER_AVC msg=audit(1206220506.806:113): user pid=2122 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1206220506.802:112): arch=40000003 syscall=4 success=yes exit=2 a0=6 a1=bf8dd8b6 a2=2 a3=bf8dd8b8 items=0 ppid=23556 pid=23557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null) >type=AVC msg=audit(1206220530.497:114): avc: denied { 0x100000 } for pid=23563 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206220530.497:114): arch=40000003 syscall=196 success=no exit=-13 a0=bfa9a64f a1=bfa99c9c a2=2eaff4 a3=bfa9a64f items=0 ppid=2957 pid=23563 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=AVC msg=audit(1206220601.452:115): avc: denied { 0x100000 } for pid=23565 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206220601.452:115): arch=40000003 syscall=196 success=no exit=-13 a0=bffda64f a1=bffda24c a2=2eaff4 a3=bffda64f items=0 ppid=2957 pid=23565 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=MAC_CONFIG_CHANGE msg=audit(1206220703.602:116): bool=samba_share_nfs val=1 old_val=0 auid=500 >type=USER_AVC msg=audit(1206220703.614:117): user pid=2122 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=SYSCALL msg=audit(1206220703.602:116): arch=40000003 syscall=4 success=yes exit=2 a0=6 a1=bf95a1f6 a2=2 a3=bf95a1f8 items=0 ppid=23568 pid=23569 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setsebool" exe="/usr/sbin/setsebool" subj=system_u:system_r:setsebool_t:s0 key=(null) >type=USER_AVC msg=audit(1206220763.769:118): user pid=2122 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1206220773.247:119): avc: denied { 0x100000 } for pid=23579 comm="restorecon" name="rt2x00-cvs-2008032215" dev=cifs ino=55116 scontext=system_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:cifs_t:s0 tclass=file >type=SYSCALL msg=audit(1206220773.247:119): arch=40000003 syscall=196 success=no exit=-13 a0=bfbbc64f a1=bfbbbe2c a2=2eaff4 a3=bfbbc64f items=0 ppid=2957 pid=23579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="restorecon" exe="/sbin/setfiles" subj=system_u:system_r:setfiles_t:s0 key=(null) >type=USER_END msg=audit(1206221222.223:120): user pid=23543 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206221318.667:121): user pid=23610 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206221318.669:122): user pid=23610 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206221319.566:123): user pid=23610 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206221351.972:124): avc: denied { search } for pid=24175 comm="iwconfig" name="keys" dev=debugfs ino=56502 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206221351.972:124): avc: denied { search } for pid=24175 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=56548 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206221351.972:124): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bf9906c8 a3=bf990800 items=0 ppid=24136 pid=24175 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=USER_END msg=audit(1206221622.052:125): user pid=23610 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206222779.611:126): user pid=24492 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206222779.615:127): user pid=24492 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206222779.680:128): user pid=24492 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206223262.459:129): user pid=24670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206223262.464:130): user pid=24670 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206223262.466:131): login pid=24670 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206223262.478:132): user pid=24670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206223262.600:133): user pid=24670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206223262.600:134): user pid=24670 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206223398.335:135): user pid=24492 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206223403.276:136): user pid=2950 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206223403.298:137): user pid=2950 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206223437.223:138): user pid=2629 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206223437.344:139): user pid=2629 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1206223460.698:5269): auditd normal halt, sending auid=4294967295 pid=24925 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206223943.139:2186): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=2096 res=success >type=CONFIG_CHANGE msg=audit(1206223943.245:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206223943.245:9): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206223943.423:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206223943.423:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1206223997.357:12): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206223997.379:13): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206223997.384:14): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206223997.398:15): login pid=2620 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206223997.494:16): user pid=2620 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206223997.566:17): user pid=2620 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206223997.569:18): user pid=2620 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206224101.285:19): user pid=2922 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206224101.294:20): user pid=2922 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206224101.976:21): user pid=2922 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206224102.196:22): user pid=2922 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1206224186.554:23): user pid=2954 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1206224194.135:24): user pid=2954 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206224194.137:25): user pid=2954 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206224194.366:26): user pid=2954 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206224482.253:27): user pid=3025 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206224482.254:28): user pid=3025 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206224483.154:29): user pid=3025 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206224517.279:30): user pid=3025 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1206224739.853:31): user pid=3071 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=wbpriv exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=DAEMON_END msg=audit(1206224827.494:2187): auditd normal halt, sending auid=500 pid=3122 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206224829.310:671): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=500 pid=3139 res=success >type=CONFIG_CHANGE msg=audit(1206224829.414:34): audit_enabled=1 old=1 by auid=500 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206224829.414:35): audit_enabled=1 old=1 by auid=500 res=1 >type=CONFIG_CHANGE msg=audit(1206224829.516:36): audit_backlog_limit=320 old=320 by auid=500 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206224829.516:37): audit_backlog_limit=320 old=320 by auid=500 res=1 >type=USER_END msg=audit(1206224866.018:38): user pid=2954 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206224897.139:39): user pid=3158 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206224897.143:40): user pid=3158 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206224897.423:41): user pid=3158 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1206225064.174:42): user pid=2922 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206225064.723:43): user pid=2922 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1206225070.810:44): user pid=3158 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206226862.353:45): user pid=3960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206226862.357:46): user pid=3960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206226862.358:47): login pid=3960 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206226862.408:48): user pid=3960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206226862.585:49): user pid=3960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206226862.587:50): user pid=3960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206228701.402:51): user pid=2620 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206228701.802:52): user pid=2620 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_END msg=audit(1206228730.076:672): auditd normal halt, sending auid=4294967295 pid=4640 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206610190.710:8192): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-34.fc8 auid=4294967295 pid=2088 res=success >type=CONFIG_CHANGE msg=audit(1206610190.817:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206610190.817:9): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206610190.909:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206610190.909:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1206610246.526:12): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1206610246.531:13): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1206610258.990:14): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=? exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1206610258.991:15): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1206610268.766:16): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206610268.793:17): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206610268.827:18): user pid=2609 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206610268.840:19): login pid=2609 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206610268.936:20): user pid=2609 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206610269.007:21): user pid=2609 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206610269.008:22): user pid=2609 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206610488.602:23): user pid=2912 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206610488.611:24): user pid=2912 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206610489.534:25): user pid=2912 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1206611652.982:26): user pid=2965 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0 msg='op=adding group acct=smolt exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1206611653.342:27): user pid=2966 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0 msg='op=adding user acct=smolt exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_ACCT msg=audit(1206612062.176:28): user pid=5599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206612062.179:29): user pid=5599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206612062.180:30): login pid=5599 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206612062.774:31): user pid=5599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206612062.900:32): user pid=5599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206612062.901:33): user pid=5599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206615663.059:34): user pid=10585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206615663.064:35): user pid=10585 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206615663.064:36): login pid=10585 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206615663.110:37): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206615663.213:38): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206615663.214:39): user pid=10585 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206619262.653:40): user pid=24118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206619262.656:41): user pid=24118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206619262.657:42): login pid=24118 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206619262.711:43): user pid=24118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206619262.781:44): user pid=24118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206619262.784:45): user pid=24118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206622861.821:46): user pid=24218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206622861.825:47): user pid=24218 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206622861.827:48): login pid=24218 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206622861.833:49): user pid=24218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206622861.848:50): user pid=24218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206622861.848:51): user pid=24218 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206626461.884:52): user pid=24318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206626461.887:53): user pid=24318 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206626461.889:54): login pid=24318 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206626461.897:55): user pid=24318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206626461.913:56): user pid=24318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206626461.916:57): user pid=24318 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206630061.953:58): user pid=24418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206630061.956:59): user pid=24418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206630061.958:60): login pid=24418 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206630061.964:61): user pid=24418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206630061.979:62): user pid=24418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206630061.980:63): user pid=24418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206633661.016:64): user pid=24518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206633661.019:65): user pid=24518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206633661.022:66): login pid=24518 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206633661.030:67): user pid=24518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206633661.045:68): user pid=24518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206633661.046:69): user pid=24518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206637261.082:70): user pid=24618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206637261.085:71): user pid=24618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206637261.087:72): login pid=24618 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206637261.095:73): user pid=24618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206637261.112:74): user pid=24618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206637261.115:75): user pid=24618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206640861.151:76): user pid=24718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206640861.155:77): user pid=24718 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206640861.157:78): login pid=24718 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206640861.165:79): user pid=24718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206640861.182:80): user pid=24718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206640861.185:81): user pid=24718 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206644461.222:82): user pid=24818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206644461.225:83): user pid=24818 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206644461.227:84): login pid=24818 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206644461.235:85): user pid=24818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206644461.251:86): user pid=24818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206644461.254:87): user pid=24818 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206648061.290:88): user pid=24918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206648061.294:89): user pid=24918 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206648061.296:90): login pid=24918 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206648061.303:91): user pid=24918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206648061.319:92): user pid=24918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206648061.322:93): user pid=24918 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206651661.359:94): user pid=25018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206651661.362:95): user pid=25018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206651661.364:96): login pid=25018 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206651661.372:97): user pid=25018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206651661.388:98): user pid=25018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206651661.391:99): user pid=25018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1206655261.428:100): user pid=25118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206655261.431:101): user pid=25118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206655261.433:102): login pid=25118 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206655261.441:103): user pid=25118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206655261.458:104): user pid=25118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206655261.461:105): user pid=25118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206655891.925:106): user pid=2609 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1206655892.531:107): user pid=2609 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1206655921.649:108): user pid=2912 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_END msg=audit(1206655933.284:8193): auditd normal halt, sending auid=4294967295 pid=25419 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1206694197.818:267): auditd start, ver=1.6.8 format=raw kernel=2.6.24.3-50.fc8 auid=4294967295 pid=2064 res=success >type=CONFIG_CHANGE msg=audit(1206694197.929:8): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206694197.929:9): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1206694198.092:10): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1206694198.092:11): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_AUTH msg=audit(1206694255.810:12): user pid=2586 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1206694255.832:13): user pid=2586 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1206694255.836:14): user pid=2586 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1206694255.850:15): login pid=2586 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1206694255.947:16): user pid=2586 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0 selected-context=system_u:system_r:unconfined_t:s0: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206694256.014:17): user pid=2586 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=bobhorrobin exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1206694256.017:18): user pid=2586 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=cirov02.cirocourt, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1206694406.429:19): user pid=2997 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206694406.449:20): user pid=2997 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206694407.196:21): user pid=2997 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206694413.920:22): user pid=2996 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206694413.926:23): user pid=2996 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206694414.026:24): user pid=2996 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206694862.675:25): user pid=3306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206694862.697:26): user pid=3306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206694862.698:27): login pid=3306 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206694862.745:28): user pid=3306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206694862.829:29): user pid=3306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206694862.830:30): user pid=3306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1206694881.700:31): user pid=3311 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1206694881.709:32): user pid=3311 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1206694881.883:33): user pid=3311 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1206694923.020:34): avc: denied { search } for pid=3919 comm="iwconfig" name="keys" dev=debugfs ino=4504 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=AVC msg=audit(1206694923.020:34): avc: denied { search } for pid=3919 comm="iwconfig" name="netdev:wlan0" dev=debugfs ino=4976 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1206694923.020:34): arch=40000003 syscall=54 success=yes exit=0 a0=3 a1=8b2a a2=bfac8b08 a3=bfac8c40 items=0 ppid=3880 pid=3919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="iwconfig" exe="/sbin/iwconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) >type=USER_END msg=audit(1206695416.833:35): user pid=2997 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206695419.023:36): user pid=2996 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1206696220.547:37): user pid=3311 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_close acct=root exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1206698285.158:38): user pid=4397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206698285.166:39): user pid=4397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1206698286.316:40): user pid=4397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1206698286.371:41): user pid=4397 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1206698462.881:42): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1206698462.885:43): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1206698462.886:44): login pid=4429 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1206698462.903:45): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1206698463.003:46): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1206698463.003:47): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 439362
: 299442