Attachment 304944 Details for Bug 445848 – audit log

audit log

audit.log (text/plain), 913.94 KB, created by Mihai Harpau on 2008-05-09 14:08:59 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mihai Harpau

Created: 2008-05-09 14:08:59 UTC

Size: 913.94 KB

patch

obsolete

>type=DAEMON_START msg=audit(1208987484.380:7914): auditd start, ver=1.7.1 format=raw kernel=2.6.25-0.234.rc9.git1.fc9.i686 auid=4294967295 pid=1844 res=success
>type=CONFIG_CHANGE msg=audit(1208987484.491:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USYS_CONFIG msg=audit(1208987543.499:5): user pid=2329 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1208987574.133:6): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1208987574.136:7): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1208987574.136:8): login pid=2421 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1208987574.202:9): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1208987574.273:10): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1208987574.274:11): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1208987574.275:12): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1208988061.974:13): user pid=4701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1208988061.977:14): user pid=4701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1208988061.978:15): login pid=4701 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1208988061.980:16): user pid=4701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1208988062.063:17): user pid=4701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1208988062.066:18): user pid=4701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1208988421.358:19): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1208988421.361:20): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1208988427.101:7915): auditd normal halt, sending auid=0 pid=5215 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1208988479.502:4695): auditd start, ver=1.7.1 format=raw kernel=2.6.25-0.234.rc9.git1.fc9.i686 auid=4294967295 pid=1837 res=success
>type=CONFIG_CHANGE msg=audit(1208988479.613:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1208988512.164:5): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1208988512.167:6): user pid=2342 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1208988512.167:7): login pid=2342 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1208988512.312:8): user pid=2342 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1208988512.385:9): user pid=2342 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1208988512.386:10): user pid=2342 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1208988512.387:11): user pid=2342 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1208991661.243:12): user pid=5074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1208991661.245:13): user pid=5074 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1208991661.246:14): login pid=5074 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1208991661.247:15): user pid=5074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1208991661.300:16): user pid=5074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1208991661.301:17): user pid=5074 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1208994192.535:18): avc:  denied  { setattr } for  pid=18100 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1208994192.535:18): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bffe2084 a2=0 a3=8cf6530 items=0 ppid=18098 pid=18100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1208994192.538:19): avc:  denied  { setattr } for  pid=18100 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1208994192.538:19): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bffe2084 a2=0 a3=8cf6530 items=0 ppid=18098 pid=18100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1208994192.539:20): avc:  denied  { setattr } for  pid=18100 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1208994192.539:20): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bffe22e4 a2=0 a3=8cf44f0 items=0 ppid=18098 pid=18100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1208995261.336:21): user pid=18896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1208995261.338:22): user pid=18896 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1208995261.339:23): login pid=18896 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1208995261.341:24): user pid=18896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1208995261.349:25): user pid=18896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1208995261.350:26): user pid=18896 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1208998861.372:27): user pid=27374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1208998861.374:28): user pid=27374 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1208998861.375:29): login pid=27374 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1208998861.376:30): user pid=27374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1208998861.384:31): user pid=27374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1208998861.384:32): user pid=27374 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1208998921.393:33): user pid=27419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1208998921.393:34): user pid=27419 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1208998921.394:35): login pid=27419 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1208998921.396:36): user pid=27419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209000321.378:37): avc:  denied  { setattr } for  pid=1904 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209000321.378:37): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9efb34 a2=0 a3=9fda530 items=0 ppid=1903 pid=1904 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209000321.391:38): avc:  denied  { setattr } for  pid=1904 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209000321.391:38): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9efb34 a2=0 a3=9fda530 items=0 ppid=1903 pid=1904 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209000321.394:39): avc:  denied  { setattr } for  pid=1904 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209000321.394:39): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9efd94 a2=0 a3=9fd84f0 items=0 ppid=1903 pid=1904 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1209000321.424:40): user pid=27419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209000321.425:41): user pid=27419 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209002461.444:42): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209002461.446:43): user pid=3562 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209002461.447:44): login pid=3562 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209002461.448:45): user pid=3562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209002461.455:46): user pid=3562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209002461.455:47): user pid=3562 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209006061.477:48): user pid=6070 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209006061.478:49): user pid=6070 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209006061.478:50): login pid=6070 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209006061.481:51): user pid=6070 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209006061.485:52): user pid=6070 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209006061.486:53): user pid=6070 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209009661.508:54): user pid=8577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209009661.510:55): user pid=8577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209009661.511:56): login pid=8577 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209009661.513:57): user pid=8577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209009661.520:58): user pid=8577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209009661.521:59): user pid=8577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209013261.667:60): user pid=10364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209013261.668:61): user pid=10364 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209013261.668:62): login pid=10364 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209013261.686:63): user pid=10364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209013261.709:64): user pid=10364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209013261.709:65): user pid=10364 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1209013601.518:66): user pid=14588 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="haldaemon" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209013601.519:67): user pid=14588 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="haldaemon" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209013608.927:68): user pid=14691 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209013608.927:69): user pid=14691 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=DAEMON_END msg=audit(1209013620.637:4696): auditd normal halt, sending auid=0 pid=14721 subj=unconfined_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209013620.863:9732): auditd start, ver=1.7.2 format=raw kernel=2.6.25-0.234.rc9.git1.fc9.i686 auid=0 pid=14735 res=success
>type=CONFIG_CHANGE msg=audit(1209013620.966:72): audit_enabled=1 old=1 by auid=0 subj=unconfined_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1209013620.969:73): audit_backlog_limit=320 old=320 by auid=0 subj=unconfined_u:system_r:auditctl_t:s0 res=1
>type=DAEMON_END msg=audit(1209013689.681:9733): auditd normal halt, sending auid=0 pid=15073 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209013742.052:6709): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=1838 res=success
>type=CONFIG_CHANGE msg=audit(1209013742.172:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209013790.824:5): user pid=2570 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209013790.828:6): user pid=2570 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209013790.921:7): user pid=2570 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209013791.043:8): login pid=2570 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209013791.117:9): user pid=2570 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209013791.591:10): user pid=2570 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209013791.623:11): user pid=2570 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209013932.263:12): user pid=3094 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209013932.265:13): user pid=3094 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209013932.383:14): user pid=3094 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209014035.798:15): user pid=3094 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209014148.126:16): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=2967 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209014148.160:17): user pid=2570 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209014148.170:18): user pid=2570 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209014177.844:19): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209014177.847:20): user pid=2344 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209014177.848:21): login pid=2344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209014177.859:22): user pid=2344 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209014177.890:23): user pid=2344 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209014177.890:24): user pid=2344 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209014177.891:25): user pid=2344 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209014359.020:26): user pid=2344 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209014359.022:27): user pid=2344 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209014365.334:6710): auditd normal halt, sending auid=0 pid=4460 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209014422.645:4747): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2023 res=success
>type=CONFIG_CHANGE msg=audit(1209014422.774:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=ANOM_ABEND msg=audit(1209014591.413:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 pid=2824 comm="console-kit-dae" sig=11
>type=DAEMON_END msg=audit(1209014592.149:4748): auditd normal halt, sending auid=0 pid=2963 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209014650.977:1146): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2020 res=success
>type=CONFIG_CHANGE msg=audit(1209014651.106:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209016861.939:5): user pid=2723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209016861.941:6): user pid=2723 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209016861.942:7): login pid=2723 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209016861.960:8): user pid=2723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209016862.009:9): user pid=2723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209016862.010:10): user pid=2723 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209017118.942:11): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209017118.944:12): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209017118.945:13): login pid=2486 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209017118.985:14): user pid=2486 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209017119.042:15): user pid=2486 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209017119.043:16): user pid=2486 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209017119.044:17): user pid=2486 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209017138.977:18): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209017138.980:19): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209017138.985:20): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209017139.070:21): login pid=2621 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209017139.137:22): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209017139.616:23): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209017139.618:24): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209017170.459:25): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209017170.459:26): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209017170.542:27): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209017201.373:28): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209017279.714:29): user pid=3408 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209017279.717:30): user pid=3408 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209017366.110:31): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3311 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209017366.141:32): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209017366.169:33): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209018588.792:34): user pid=4143 uid=0 auid=0 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="jackuser" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209019446.796:35): user pid=2486 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209019446.799:36): user pid=2486 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209019451.692:1147): auditd normal halt, sending auid=0 pid=4610 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209019509.679:6293): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2024 res=success
>type=CONFIG_CHANGE msg=audit(1209019509.808:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209019549.290:5): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209019549.294:6): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209019549.299:7): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209019549.382:8): login pid=2693 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209019549.464:9): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209019549.993:10): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209019550.024:11): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209019796.334:12): user pid=3130 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209019796.336:13): user pid=3130 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209020317.671:14): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3062 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209020317.701:15): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209020317.741:16): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209020335.596:17): user pid=2512 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209020335.599:18): user pid=2512 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209020335.599:19): login pid=2512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209020335.610:20): user pid=2512 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209020335.645:21): user pid=2512 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209020335.645:22): user pid=2512 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209020335.647:23): user pid=2512 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209020462.226:24): user pid=3880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209020462.229:25): user pid=3880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209020462.230:26): login pid=3880 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209020462.232:27): user pid=3880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209020462.286:28): user pid=3880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209020462.288:29): user pid=3880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209020857.918:30): user pid=3477 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209020857.922:31): user pid=3477 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209020857.926:32): user pid=3477 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209020858.014:33): login pid=3477 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209020858.038:34): user pid=3477 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209020858.385:35): user pid=3477 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209020858.389:36): user pid=3477 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209021025.916:37): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4589 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209021025.947:38): user pid=3477 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209021025.988:39): user pid=3477 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209021411.658:40): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=5092 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209021426.649:41): user pid=5763 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209021426.653:42): user pid=5763 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209021426.656:43): user pid=5763 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209021426.730:44): login pid=5763 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1209021426.753:45): user pid=5763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209021427.095:46): user pid=5763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209021427.159:47): user pid=5763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209022161.946:48): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=6442 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209022161.976:49): user pid=5763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209022162.005:50): user pid=5763 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209023078.274:51): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=7105 comm="metacity" sig=6
>type=CRED_DISP msg=audit(1209023379.886:52): user pid=2512 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209023379.891:53): user pid=2512 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209023386.814:6294): auditd normal halt, sending auid=0 pid=8784 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209023445.779:7674): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2021 res=success
>type=CONFIG_CHANGE msg=audit(1209023445.907:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209023484.987:5): user pid=2690 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209023484.991:6): user pid=2690 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209023484.995:7): user pid=2690 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209023485.122:8): login pid=2690 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209023485.187:9): user pid=2690 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209023485.761:10): user pid=2690 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209023485.773:11): user pid=2690 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209024061.463:12): user pid=3159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209024061.465:13): user pid=3159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209024061.466:14): login pid=3159 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209024061.468:15): user pid=3159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209024061.511:16): user pid=3159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209024061.512:17): user pid=3159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209024242.184:18): user pid=3202 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209024242.187:19): user pid=3202 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209024242.312:20): user pid=3202 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209024242.313:21): user pid=3202 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209024299.517:22): user pid=3202 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209024299.519:23): user pid=3202 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1209024328.500:24): user pid=3310 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209024523.663:25): user pid=3468 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209024528.566:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=2563 comm="Xorg" sig=6
>type=CRED_DISP msg=audit(1209024528.932:27): user pid=2690 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209024529.001:28): user pid=2690 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209024529.195:29): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3061 comm="tomboy" sig=11
>type=USER_AUTH msg=audit(1209025061.685:30): user pid=3634 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1209025061.688:31): user pid=3634 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1209025061.701:32): user pid=3634 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=LOGIN msg=audit(1209025061.703:33): login pid=3634 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209025061.703:34): user pid=3634 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1209025061.844:35): user pid=3638 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=/dev/pts/1 res=success)'
>type=CRED_REFR msg=audit(1209025061.845:36): user pid=3638 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1209025764.410:37): user pid=3634 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_END msg=audit(1209025764.411:38): user pid=3634 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=DAEMON_END msg=audit(1209025769.526:7675): auditd normal halt, sending auid=0 pid=3957 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209028281.854:3619): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2065 res=success
>type=CONFIG_CHANGE msg=audit(1209028281.983:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209028315.182:5): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209028315.186:6): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209028315.192:7): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209028315.273:8): login pid=2734 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209028315.409:9): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209028316.371:10): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209028336.384:11): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209028365.227:12): user pid=3130 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209028365.227:13): user pid=3130 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209028365.363:14): user pid=3130 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209028621.542:15): user pid=3130 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209028627.373:16): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3109 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209028627.404:17): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209028627.451:18): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209028644.433:19): user pid=2553 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209028644.435:20): user pid=2553 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209028644.436:21): login pid=2553 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209028644.447:22): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209028644.478:23): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209028644.479:24): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209028644.480:25): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209028767.456:26): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209028767.460:27): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209028774.962:28): user pid=3882 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209028774.964:29): user pid=3882 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209028774.965:30): login pid=3882 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209028774.975:31): user pid=3882 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209028775.007:32): user pid=3882 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209028775.008:33): user pid=3882 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209028775.009:34): user pid=3882 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209028826.202:35): user pid=3455 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209028826.206:36): user pid=3455 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209028826.210:37): user pid=3455 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209028826.292:38): login pid=3455 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209028826.316:39): user pid=3455 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209028826.659:40): user pid=3455 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209028826.812:41): user pid=3455 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209028900.225:42): user pid=5267 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209028900.227:43): user pid=5267 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209028942.026:44): user pid=5286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209028942.026:45): user pid=5286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209028942.034:46): user pid=5286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209029035.895:47): user pid=5286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209029055.560:48): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4940 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209029055.595:49): user pid=3455 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209029055.638:50): user pid=3455 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209029070.587:51): user pid=5950 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209029070.591:52): user pid=5950 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=USER_AUTH msg=audit(1209029080.015:53): user pid=6136 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209029080.019:54): user pid=6136 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209029080.023:55): user pid=6136 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209029080.109:56): login pid=6136 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1209029080.133:57): user pid=6136 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209029080.479:58): user pid=6136 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209029080.482:59): user pid=6136 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209029082.600:60): user pid=6530 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209029082.604:61): user pid=6530 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209029109.500:62): user pid=6690 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209029201.000:63): user pid=6880 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209029205.686:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 pid=5795 comm="Xorg" sig=6
>type=CRED_DISP msg=audit(1209029205.776:65): user pid=6136 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209029205.791:66): user pid=6136 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209029205.879:67): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=6605 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209029253.459:68): user pid=3882 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209029253.461:69): user pid=3882 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209029260.475:3620): auditd normal halt, sending auid=0 pid=7301 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209029362.773:536): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2078 res=success
>type=CONFIG_CHANGE msg=audit(1209029362.893:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209029401.139:5): user pid=2702 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209029401.143:6): user pid=2702 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209029401.149:7): user pid=2702 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209029401.227:8): login pid=2702 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209029401.377:9): user pid=2702 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209029401.996:10): user pid=2702 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209029402.007:11): user pid=2702 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209029408.138:12): user pid=2957 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209029408.139:13): user pid=2957 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209030925.153:14): user pid=3910 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209030925.157:15): user pid=3910 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209030925.292:16): user pid=3910 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209030925.294:17): user pid=3910 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209031261.817:18): user pid=4321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209031261.820:19): user pid=4321 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209031261.821:20): login pid=4321 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209031261.824:21): user pid=4321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209031261.877:22): user pid=4321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209031261.879:23): user pid=4321 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209032353.426:24): user pid=3910 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209032353.430:25): user pid=3910 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209032371.015:26): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3011 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209032371.056:27): user pid=2702 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209032371.066:28): user pid=2702 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209032401.588:29): user pid=2566 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209032401.591:30): user pid=2566 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209032401.592:31): login pid=2566 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209032401.603:32): user pid=2566 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209032401.632:33): user pid=2566 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209032401.633:34): user pid=2566 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209032401.634:35): user pid=2566 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209032643.237:36): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=5131 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209032656.972:37): user pid=5805 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209032656.975:38): user pid=5805 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209032656.979:39): user pid=5805 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209032657.064:40): login pid=5805 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209032657.088:41): user pid=5805 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209032657.434:42): user pid=5805 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209032657.437:43): user pid=5805 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209032659.949:44): user pid=6168 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209032659.971:45): user pid=6168 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209033412.953:46): user pid=6632 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209034222.414:47): user pid=6909 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209034668.704:48): user pid=7057 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209034668.704:49): user pid=7057 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209034668.745:50): user pid=7057 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209034861.910:51): user pid=7917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209034861.912:52): user pid=7917 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209034861.913:53): login pid=7917 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209034861.914:54): user pid=7917 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209034861.921:55): user pid=7917 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209034861.922:56): user pid=7917 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209035401.036:57): user pid=7057 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209035449.612:58): user pid=8389 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209035449.615:59): user pid=8389 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209035449.625:60): user pid=8389 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209035449.626:61): user pid=8389 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209036244.737:62): user pid=8669 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209036244.737:63): user pid=8669 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209036244.745:64): user pid=8669 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1209036385.550:65): user pid=2528 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P2010 uri=parallel:/dev/lp0 banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=sysop, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1209036385.675:66): user pid=2528 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P2010 uri=parallel:/dev/lp0 banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=sysop, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1209036385.680:67): user pid=2528 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=LaserJet_P2010 uri=parallel:/dev/lp0 banners=none,none range=s0: exe="/usr/sbin/cupsd" (hostname=sysop, addr=127.0.0.1, terminal=? res=success)'
>type=USER_END msg=audit(1209036417.603:68): user pid=8669 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209038465.043:69): user pid=9568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209038465.045:70): user pid=9568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209038465.045:71): login pid=9568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209038465.069:72): user pid=9568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209038465.087:73): user pid=9568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209038465.087:74): user pid=9568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209042061.113:75): user pid=10795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209042061.114:76): user pid=10795 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209042061.115:77): login pid=10795 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209042061.117:78): user pid=10795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209042061.123:79): user pid=10795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209042061.124:80): user pid=10795 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209045661.147:81): user pid=11833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209045661.149:82): user pid=11833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209045661.150:83): login pid=11833 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209045661.152:84): user pid=11833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209045661.156:85): user pid=11833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209045661.157:86): user pid=11833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209049212.350:87): user pid=12859 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209049261.179:88): user pid=12880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209049261.181:89): user pid=12880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209049261.181:90): login pid=12880 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209049261.187:91): user pid=12880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209049261.194:92): user pid=12880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209049261.194:93): user pid=12880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209051287.089:94): user pid=13752 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209051287.089:95): user pid=13752 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209051326.941:96): user pid=8389 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209051326.946:97): user pid=8389 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209051702.614:98): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=6243 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209051702.684:99): user pid=5805 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209051702.870:100): user pid=5805 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209051771.928:101): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209051771.932:102): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209051771.936:103): user pid=14265 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209051772.017:104): login pid=14265 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=10
>type=USER_ROLE_CHANGE msg=audit(1209051772.097:105): user pid=14265 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209051772.468:106): user pid=14265 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209051772.685:107): user pid=14265 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209051775.326:108): user pid=14754 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209051775.327:109): user pid=14754 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209052041.445:110): user pid=14265 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209052041.486:111): user pid=14265 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209052041.559:112): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=14863 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209052066.102:113): user pid=2566 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209052066.107:114): user pid=2566 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209052073.810:537): auditd normal halt, sending auid=0 pid=16145 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209052135.819:2383): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2056 res=success
>type=CONFIG_CHANGE msg=audit(1209052135.940:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209052172.153:5): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209052172.157:6): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209052172.162:7): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209052172.245:8): login pid=2734 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209052172.386:9): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209052173.015:10): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209052173.025:11): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209052180.009:12): user pid=3089 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209052180.010:13): user pid=3089 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209052266.637:14): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209052266.735:15): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3127 comm="tomboy" sig=11
>type=USER_END msg=audit(1209052266.744:16): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209052312.439:17): user pid=2553 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209052312.442:18): user pid=2553 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209052312.442:19): login pid=2553 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209052312.453:20): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209052312.484:21): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209052312.485:22): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209052312.486:23): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209052420.174:24): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209052420.177:25): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209052420.181:26): user pid=3342 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209052420.265:27): login pid=3342 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209052420.292:28): user pid=3342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209052420.357:29): user pid=3342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209052420.359:30): user pid=3342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209052861.224:31): user pid=4452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209052861.226:32): user pid=4452 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209052861.226:33): login pid=4452 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209052861.238:34): user pid=4452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209052861.276:35): user pid=4452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209052861.276:36): user pid=4452 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209054466.005:37): user pid=4536 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209054466.008:38): user pid=4536 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209054466.134:39): user pid=4536 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209054466.134:40): user pid=4536 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209056461.295:41): user pid=4671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209056461.297:42): user pid=4671 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209056461.297:43): login pid=4671 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209056461.303:44): user pid=4671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209056461.323:45): user pid=4671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209056461.324:46): user pid=4671 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209057293.575:47): user pid=4536 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209057293.578:48): user pid=4536 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209057359.019:49): user pid=4898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209057359.020:50): user pid=4898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209057544.936:51): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4339 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209057544.980:52): user pid=3342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209057545.025:53): user pid=3342 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209057646.514:54): user pid=5285 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209057646.518:55): user pid=5285 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209057646.521:56): user pid=5285 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209057646.603:57): login pid=5285 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1209057646.627:58): user pid=5285 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209057646.996:59): user pid=5285 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209057647.013:60): user pid=5285 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209057718.106:61): user pid=6410 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209057718.107:62): user pid=6410 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209057817.377:63): user pid=6441 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209057817.380:64): user pid=6441 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209057817.613:65): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209057817.619:66): user pid=2553 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209057817.759:67): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=6323 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209057823.755:2384): auditd normal halt, sending auid=0 pid=6725 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209057885.790:6605): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2067 res=success
>type=CONFIG_CHANGE msg=audit(1209057885.922:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209057919.804:5): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209057919.808:6): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209057919.814:7): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209057919.907:8): login pid=2745 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209057920.054:9): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209057920.760:10): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209057920.771:11): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209058314.265:12): user pid=3245 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209058314.266:13): user pid=3245 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209058342.788:14): user pid=3252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209058342.790:15): user pid=3252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209058342.921:16): user pid=3252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209058342.921:17): user pid=3252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209058405.109:18): user pid=3252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209058405.111:19): user pid=3252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209058419.226:20): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3120 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209058425.868:6606): auditd normal halt, sending auid=0 pid=3605 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209058484.155:1658): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2057 res=success
>type=CONFIG_CHANGE msg=audit(1209058484.276:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209058515.594:5): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209058515.598:6): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209058515.603:7): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209058515.688:8): login pid=2734 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209058515.773:9): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209058516.435:10): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209058516.446:11): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209058852.778:12): user pid=3339 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209058852.781:13): user pid=3339 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209058852.915:14): user pid=3339 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209058852.916:15): user pid=3339 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209058976.467:16): user pid=3339 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209058976.469:17): user pid=3339 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209058983.108:18): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3111 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209058988.796:1659): auditd normal halt, sending auid=0 pid=3676 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209116909.910:4773): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2057 res=success
>type=CONFIG_CHANGE msg=audit(1209116910.030:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209116946.600:5): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209116946.603:6): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209116946.703:7): user pid=2734 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209116947.038:8): login pid=2734 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209116947.099:9): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209116947.760:10): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209116947.832:11): user pid=2734 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209117072.209:12): user pid=3177 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209117072.212:13): user pid=3177 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209117661.760:14): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209117661.763:15): user pid=3204 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209117661.764:16): login pid=3204 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209117661.766:17): user pid=3204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209117661.820:18): user pid=3204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209117661.821:19): user pid=3204 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209118107.471:20): user pid=3220 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209118107.474:21): user pid=3220 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209118107.526:22): user pid=3220 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209118107.526:23): user pid=3220 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209121261.849:24): user pid=3573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209121261.850:25): user pid=3573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209121261.850:26): login pid=3573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209121261.856:27): user pid=3573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209121261.866:28): user pid=3573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209121261.867:29): user pid=3573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209122255.313:30): user pid=5163 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209122255.315:31): user pid=5163 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1209122378.315:32): avc:  denied  { setattr } for  pid=7264 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209122378.315:32): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf99aee4 a2=0 a3=964e530 items=0 ppid=7262 pid=7264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209122378.316:33): avc:  denied  { setattr } for  pid=7264 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209122378.316:33): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf99aee4 a2=0 a3=964e530 items=0 ppid=7262 pid=7264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209122378.317:34): avc:  denied  { setattr } for  pid=7264 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209122378.317:34): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf99b144 a2=0 a3=964c4f0 items=0 ppid=7262 pid=7264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=CRED_DISP msg=audit(1209122738.046:35): user pid=3220 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209122738.050:36): user pid=3220 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209122981.681:37): user pid=7665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209122981.684:38): user pid=7665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1209122981.690:39): user pid=7665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1209122981.691:40): user pid=7665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209124861.894:41): user pid=8159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209124861.895:42): user pid=8159 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209124861.895:43): login pid=8159 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209124861.898:44): user pid=8159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209124861.905:45): user pid=8159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209124861.905:46): user pid=8159 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209124991.304:47): user pid=8196 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209125455.178:48): user pid=7665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1209125455.182:49): user pid=7665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_ABEND msg=audit(1209125462.762:50): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3105 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209125468.787:4774): auditd normal halt, sending auid=0 pid=8621 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209125527.668:7630): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2074 res=success
>type=CONFIG_CHANGE msg=audit(1209125527.802:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209125561.607:5): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209125561.611:6): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209125561.633:7): user pid=2752 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209125561.719:8): login pid=2752 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209125561.761:9): user pid=2752 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209125562.507:10): user pid=2752 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209125562.524:11): user pid=2752 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209126390.170:12): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3036 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209126390.209:13): user pid=2752 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209126390.240:14): user pid=2752 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209126408.186:15): user pid=2571 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209126408.189:16): user pid=2571 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209126408.189:17): login pid=2571 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209126408.200:18): user pid=2571 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209126408.232:19): user pid=2571 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209126408.232:20): user pid=2571 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209126408.233:21): user pid=2571 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209126539.493:22): user pid=3587 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209126539.496:23): user pid=3587 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209126539.501:24): user pid=3587 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209126539.587:25): login pid=3587 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209126539.611:26): user pid=3587 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209126539.952:27): user pid=3587 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209126539.964:28): user pid=3587 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209126709.267:29): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4532 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209126709.293:30): user pid=3587 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209126709.327:31): user pid=3587 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209126718.661:32): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=4909 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209126739.165:33): user pid=5232 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=USER_ACCT msg=audit(1209126739.168:34): user pid=5232 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=CRED_ACQ msg=audit(1209126739.172:35): user pid=5232 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=LOGIN msg=audit(1209126739.245:36): login pid=5232 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209126739.269:37): user pid=5232 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209126739.607:38): user pid=5232 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=USER_LOGIN msg=audit(1209126739.610:39): user pid=5232 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209127423.560:40): user pid=6034 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209127423.562:41): user pid=6034 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209128461.384:42): user pid=6297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209128461.386:43): user pid=6297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209128461.388:44): login pid=6297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209128461.390:45): user pid=6297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209128461.438:46): user pid=6297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209128461.440:47): user pid=6297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209129858.138:48): user pid=6665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209129858.142:49): user pid=6665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209129858.236:50): user pid=6665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209129858.237:51): user pid=6665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209129950.646:52): user pid=6665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209129950.650:53): user pid=6665 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209130082.852:54): user pid=10678 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209130082.855:55): user pid=10678 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209130083.056:56): user pid=2571 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209130083.059:57): user pid=2571 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209130083.190:58): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=5813 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209130089.191:7631): auditd normal halt, sending auid=0 pid=10963 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209130173.590:1658): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2070 res=success
>type=CONFIG_CHANGE msg=audit(1209130173.701:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209130218.012:5): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209130218.016:6): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209130218.107:7): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209130218.190:8): login pid=2747 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209130218.258:9): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209130218.992:10): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209130219.086:11): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209130287.668:12): user pid=3108 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209130287.668:13): user pid=3108 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209130594.290:14): user pid=3342 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209130594.290:15): user pid=3342 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209131574.501:16): user pid=3566 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209131904.506:17): user pid=3749 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209131971.853:18): user pid=2564 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1209131971.856:19): user pid=2564 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1209131971.856:20): login pid=2564 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209131971.868:21): user pid=2564 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1209131971.901:22): user pid=2564 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1209131971.902:23): user pid=2564 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1209131971.908:24): user pid=2564 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1209131976.235:25): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3026 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209131976.309:26): user pid=2564 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1209131976.314:27): user pid=2564 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=DAEMON_END msg=audit(1209131983.122:1659): auditd normal halt, sending auid=0 pid=4213 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209132041.878:6694): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2061 res=success
>type=CONFIG_CHANGE msg=audit(1209132042.001:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209132062.165:5): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209132062.166:6): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209132062.166:7): login pid=2744 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209132062.226:8): user pid=2744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209132062.370:9): user pid=2744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209132062.370:10): user pid=2744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209132122.349:11): user pid=2738 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209132122.353:12): user pid=2738 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209132122.383:13): user pid=2738 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209132122.465:14): login pid=2738 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209132122.515:15): user pid=2738 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209132123.230:16): user pid=2738 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209132123.276:17): user pid=2738 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209132917.419:18): user pid=3067 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209132980.495:19): user pid=3129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209132980.497:20): user pid=3129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209134481.876:21): user pid=3580 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209134760.201:22): user pid=3677 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209134760.201:23): user pid=3677 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209134760.361:24): user pid=3677 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209134844.466:25): user pid=3677 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_END msg=audit(1209135105.708:6695): auditd normal halt, sending auid=0 pid=4042 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209150570.596:7614): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2084 res=success
>type=CONFIG_CHANGE msg=audit(1209150570.719:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209150639.330:5): user pid=2580 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209150639.333:6): user pid=2580 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209150639.333:7): login pid=2580 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209150639.437:8): user pid=2580 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209150639.543:9): user pid=2580 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209150639.544:10): user pid=2580 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209150639.545:11): user pid=2580 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209150674.678:12): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2798 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209150956.727:13): user pid=3533 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209150956.730:14): user pid=3533 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209150956.735:15): user pid=3533 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209150956.814:16): login pid=3533 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209150956.840:17): user pid=3533 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209150957.547:18): user pid=3533 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209150957.598:19): user pid=3533 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209151015.207:20): user pid=4552 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209151015.207:21): user pid=4552 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209151015.327:22): user pid=4552 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209151037.031:23): user pid=4552 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209151040.933:24): user pid=4571 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209151040.934:25): user pid=4571 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209151040.939:26): user pid=4571 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209151047.880:27): user pid=4571 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209151050.571:28): user pid=4852 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209151050.572:29): user pid=4852 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209151050.577:30): user pid=4852 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209151081.394:31): user pid=4852 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209151096.599:32): user pid=4877 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209151096.600:33): user pid=4877 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209151096.605:34): user pid=4877 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209151129.540:35): user pid=4877 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209151580.897:36): user pid=5920 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209151580.900:37): user pid=5920 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209151580.907:38): user pid=5920 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209151580.908:39): user pid=5920 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209152435.474:40): user pid=6055 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="stapdev" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209152435.559:41): user pid=6060 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="stapusr" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209152461.778:42): user pid=6071 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="ccache" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209153661.476:43): user pid=6160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209153661.478:44): user pid=6160 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209153661.479:45): login pid=6160 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209153661.482:46): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209153661.515:47): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209153661.515:48): user pid=6160 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209155775.054:49): user pid=6238 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209156294.989:50): user pid=1581 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209156294.990:51): user pid=1581 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209156428.219:52): user pid=5920 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209156428.222:53): user pid=5920 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209156485.241:54): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4515 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209156485.284:55): user pid=3533 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209156485.407:56): user pid=3533 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209156494.934:57): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3450 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209156507.548:58): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=USER_ACCT msg=audit(1209156507.551:59): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=CRED_ACQ msg=audit(1209156507.555:60): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=LOGIN msg=audit(1209156507.625:61): login pid=3713 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209156507.738:62): user pid=3713 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209156508.141:63): user pid=3713 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:1 res=success)'
>type=USER_LOGIN msg=audit(1209156508.142:64): user pid=3713 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209156510.678:65): user pid=4250 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209156510.684:66): user pid=4250 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209157261.539:67): user pid=5112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209157261.541:68): user pid=5112 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209157261.547:69): login pid=5112 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209157261.553:70): user pid=5112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209157261.564:71): user pid=5112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209157261.566:72): user pid=5112 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209157561.984:73): user pid=5252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209157561.987:74): user pid=5252 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209157562.324:75): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4306 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209157562.362:76): user pid=2580 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209157562.365:77): user pid=2580 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209157568.944:7615): auditd normal halt, sending auid=0 pid=5536 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209157628.336:1996): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2064 res=success
>type=CONFIG_CHANGE msg=audit(1209157628.459:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209157734.037:5): user pid=2749 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209157734.041:6): user pid=2749 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209157734.095:7): user pid=2749 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209157734.180:8): login pid=2749 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209157734.216:9): user pid=2749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209157735.028:10): user pid=2749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209157735.054:11): user pid=2749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209157857.345:12): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3038 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209157863.245:1997): auditd normal halt, sending auid=0 pid=3329 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209157946.080:8453): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2074 res=success
>type=CONFIG_CHANGE msg=audit(1209157946.203:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209157985.841:5): user pid=2761 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209157985.844:6): user pid=2761 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209157985.944:7): user pid=2761 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209157986.029:8): login pid=2761 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209157986.130:9): user pid=2761 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209157986.865:10): user pid=2761 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209157986.880:11): user pid=2761 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209158069.326:12): user pid=3157 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209158069.326:13): user pid=3157 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209158222.544:14): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3059 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209158228.922:8454): auditd normal halt, sending auid=0 pid=3482 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209158288.111:9226): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2074 res=success
>type=CONFIG_CHANGE msg=audit(1209158288.234:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209158437.558:5): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209158437.562:6): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209158437.656:7): user pid=2759 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209158437.748:8): login pid=2759 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209158437.809:9): user pid=2759 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209158438.655:10): user pid=2759 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209158438.680:11): user pid=2759 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209158473.567:12): user pid=3090 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209158473.568:13): user pid=3090 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209160861.674:14): user pid=4168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209160861.676:15): user pid=4168 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209160861.677:16): login pid=4168 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209160861.680:17): user pid=4168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209160861.736:18): user pid=4168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209160861.737:19): user pid=4168 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209163712.840:20): avc:  denied  { setattr } for  pid=16152 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209163712.840:20): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf94ef74 a2=0 a3=9596530 items=0 ppid=16150 pid=16152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209163712.845:21): avc:  denied  { setattr } for  pid=16152 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209163712.845:21): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf94ef74 a2=0 a3=9596530 items=0 ppid=16150 pid=16152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209163712.846:22): avc:  denied  { setattr } for  pid=16152 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209163712.846:22): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf94f1d4 a2=0 a3=95944f0 items=0 ppid=16150 pid=16152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1209164461.766:23): user pid=16518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209164461.769:24): user pid=16518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209164461.769:25): login pid=16518 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209164461.771:26): user pid=16518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209164461.777:27): user pid=16518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209164461.778:28): user pid=16518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209168061.803:29): user pid=18068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209168061.805:30): user pid=18068 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209168061.806:31): login pid=18068 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209168061.807:32): user pid=18068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209168061.812:33): user pid=18068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209168061.813:34): user pid=18068 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209171661.833:35): user pid=19616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209171661.834:36): user pid=19616 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209171661.835:37): login pid=19616 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209171661.836:38): user pid=19616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209171661.839:39): user pid=19616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209171661.839:40): user pid=19616 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209171721.847:41): user pid=19645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209171721.848:42): user pid=19645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209171721.849:43): login pid=19645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209171721.850:44): user pid=19645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209173075.957:45): avc:  denied  { setattr } for  pid=30349 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209173075.957:45): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfc234e4 a2=0 a3=8a7c530 items=0 ppid=30348 pid=30349 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209173075.995:46): avc:  denied  { setattr } for  pid=30349 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209173075.995:46): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfc234e4 a2=0 a3=8a7c530 items=0 ppid=30348 pid=30349 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209173075.997:47): avc:  denied  { setattr } for  pid=30349 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209173075.997:47): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfc23744 a2=0 a3=8a7a4f0 items=0 ppid=30348 pid=30349 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1209173076.127:48): user pid=19645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209173076.129:49): user pid=19645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209175261.148:50): user pid=31325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209175261.149:51): user pid=31325 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209175261.150:52): login pid=31325 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209175261.151:53): user pid=31325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209175261.157:54): user pid=31325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209175261.157:55): user pid=31325 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209178861.180:56): user pid=407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209178861.180:57): user pid=407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209178861.181:58): login pid=407 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209178861.186:59): user pid=407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209178861.193:60): user pid=407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209178861.193:61): user pid=407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209182461.216:62): user pid=1980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209182461.218:63): user pid=1980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209182461.218:64): login pid=1980 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209182461.222:65): user pid=1980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209182461.228:66): user pid=1980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209182461.229:67): user pid=1980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209186061.252:68): user pid=3703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209186061.252:69): user pid=3703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209186061.253:70): login pid=3703 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209186061.257:71): user pid=3703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209186061.267:72): user pid=3703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209186061.267:73): user pid=3703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209189661.290:74): user pid=5253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209189661.291:75): user pid=5253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209189661.291:76): login pid=5253 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1209189661.292:77): user pid=5253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209189661.296:78): user pid=5253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209189661.296:79): user pid=5253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209193261.318:80): user pid=6801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209193261.320:81): user pid=6801 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209193261.321:82): login pid=6801 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1209193261.323:83): user pid=6801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209193261.328:84): user pid=6801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209193261.329:85): user pid=6801 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209196861.352:86): user pid=8351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209196861.352:87): user pid=8351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209196861.352:88): login pid=8351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1209196861.357:89): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209196861.364:90): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209196861.365:91): user pid=8351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209200461.387:92): user pid=9899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209200461.388:93): user pid=9899 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209200461.389:94): login pid=9899 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1209200461.390:95): user pid=9899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209200461.393:96): user pid=9899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209200461.394:97): user pid=9899 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209202431.016:98): user pid=10755 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209202526.632:99): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3060 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209202526.690:100): user pid=2759 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209202526.937:101): user pid=2759 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209202553.348:102): user pid=2570 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209202553.350:103): user pid=2570 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209202553.351:104): login pid=2570 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_ROLE_CHANGE msg=audit(1209202553.363:105): user pid=2570 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209202553.394:106): user pid=2570 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209202553.394:107): user pid=2570 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209202553.395:108): user pid=2570 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209203139.099:109): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=10978 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209203152.647:110): user pid=11723 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209203152.650:111): user pid=11723 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209203152.654:112): user pid=11723 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209203152.727:113): login pid=11723 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=16
>type=USER_ROLE_CHANGE msg=audit(1209203152.751:114): user pid=11723 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209203153.122:115): user pid=11723 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209203153.124:116): user pid=11723 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209204061.423:117): user pid=12398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209204061.426:118): user pid=12398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209204061.427:119): login pid=12398 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_START msg=audit(1209204061.429:120): user pid=12398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209204061.436:121): user pid=12398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209204061.436:122): user pid=12398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209205309.105:123): user pid=12446 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209205342.709:124): user pid=12460 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209205342.711:125): user pid=12460 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209205342.957:126): auid=500 uid=500 gid=500 ses=16 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=12313 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209205343.036:127): user pid=2570 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209205343.041:128): user pid=2570 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209205348.896:9227): auditd normal halt, sending auid=0 pid=12741 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209205410.199:4988): auditd start, ver=1.7.2 format=raw kernel=2.6.25-10.fc9.i686 auid=4294967295 pid=2062 res=success
>type=CONFIG_CHANGE msg=audit(1209205410.322:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209207661.612:5): user pid=2853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209207661.615:6): user pid=2853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209207661.616:7): login pid=2853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209207661.650:8): user pid=2853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209207661.705:9): user pid=2853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209207661.707:10): user pid=2853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209207817.578:11): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209207817.581:12): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209207817.720:13): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209207817.817:14): login pid=2747 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209207817.863:15): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209207818.507:16): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209207818.546:17): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209208035.352:18): user pid=3177 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209208035.354:19): user pid=3177 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209208437.148:20): user pid=3354 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209208437.151:21): user pid=3354 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209208437.262:22): user pid=3354 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209208437.263:23): user pid=3354 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209208611.488:24): user pid=3354 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209208611.489:25): user pid=3354 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209208623.398:26): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3107 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209208629.052:4989): auditd normal halt, sending auid=0 pid=3680 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209208686.380:5098): auditd start, ver=1.7.2 format=raw kernel=2.6.25-1.fc9.i686 auid=4294967295 pid=2072 res=success
>type=CONFIG_CHANGE msg=audit(1209208686.503:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209208743.180:5): user pid=2568 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209208743.182:6): user pid=2568 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209208743.183:7): login pid=2568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209208743.292:8): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209208743.390:9): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209208743.404:10): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209208743.405:11): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209208826.639:12): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2794 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209208839.659:13): user pid=3505 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209208839.663:14): user pid=3505 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209208839.667:15): user pid=3505 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209208839.775:16): login pid=3505 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209208839.800:17): user pid=3505 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209208840.543:18): user pid=3505 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209208840.592:19): user pid=3505 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209211261.767:20): user pid=4297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209211261.770:21): user pid=4297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209211261.771:22): login pid=4297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209211261.773:23): user pid=4297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209211261.817:24): user pid=4297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209211261.818:25): user pid=4297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209211610.336:26): user pid=4315 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209211644.859:27): user pid=4358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209211644.861:28): user pid=4358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209211644.966:29): user pid=4358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209211644.967:30): user pid=4358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209212116.090:31): user pid=4358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209212116.092:32): user pid=4358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209212130.297:33): user pid=8466 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209212130.300:34): user pid=8466 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209212130.631:35): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4106 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209212130.652:36): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=3996 comm="compiz" sig=11
>type=CRED_DISP msg=audit(1209212130.671:37): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209212130.674:38): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209212136.499:5099): auditd normal halt, sending auid=0 pid=8746 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209212195.769:8555): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2066 res=success
>type=CONFIG_CHANGE msg=audit(1209212195.889:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209214861.426:5): user pid=2860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209214861.428:6): user pid=2860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209214861.429:7): login pid=2860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209214861.464:8): user pid=2860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209214861.519:9): user pid=2860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209214861.520:10): user pid=2860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209215844.088:11): user pid=2751 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209215844.092:12): user pid=2751 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209215844.195:13): user pid=2751 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209215844.291:14): login pid=2751 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209215844.338:15): user pid=2751 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209215844.932:16): user pid=2751 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209215844.977:17): user pid=2751 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209216183.083:18): user pid=3270 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209216183.086:19): user pid=3270 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209216533.891:20): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3144 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209216533.922:21): user pid=2751 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209216533.954:22): user pid=2751 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209216551.754:23): user pid=2562 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209216551.757:24): user pid=2562 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209216551.758:25): login pid=2562 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209216551.769:26): user pid=2562 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209216551.798:27): user pid=2562 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209216551.799:28): user pid=2562 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209216551.800:29): user pid=2562 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209216738.927:30): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3729 comm="metacity" sig=6
>type=DAEMON_START msg=audit(1209216973.182:2009): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2129 res=success
>type=CONFIG_CHANGE msg=audit(1209216973.304:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209217168.456:5): user pid=2814 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209217168.460:6): user pid=2814 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209217168.552:7): user pid=2814 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209217168.647:8): login pid=2814 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209217168.706:9): user pid=2814 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209217169.495:10): user pid=2814 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209217169.511:11): user pid=2814 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209217275.827:12): user pid=3225 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209217275.828:13): user pid=3225 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209217627.465:14): user pid=3329 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209217627.467:15): user pid=3329 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209217627.574:16): user pid=3329 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209217627.575:17): user pid=3329 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209218203.641:18): user pid=3329 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209218203.643:19): user pid=3329 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209218215.913:20): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3105 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209218221.852:2010): auditd normal halt, sending auid=0 pid=3759 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209218281.690:7624): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2072 res=success
>type=CONFIG_CHANGE msg=audit(1209218281.813:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209218317.940:5): user pid=2757 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209218317.944:6): user pid=2757 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209218318.045:7): user pid=2757 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209218318.142:8): login pid=2757 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209218318.198:9): user pid=2757 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209218319.099:10): user pid=2757 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209218319.114:11): user pid=2757 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209218461.334:12): user pid=3102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209218461.337:13): user pid=3102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209218461.338:14): login pid=3102 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209218461.339:15): user pid=3102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209218461.384:16): user pid=3102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209218461.386:17): user pid=3102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209218462.191:18): user pid=3100 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209218462.194:19): user pid=3100 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209218462.233:20): user pid=3100 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209218462.234:21): user pid=3100 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209218488.314:22): user pid=3100 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209218488.315:23): user pid=3100 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209218494.648:24): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3044 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209218494.681:25): user pid=2757 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209218494.715:26): user pid=2757 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209218504.820:27): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3355 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209218523.365:28): user pid=3447 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209218523.369:29): user pid=3447 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209218523.373:30): user pid=3447 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209218523.447:31): login pid=3447 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209218523.468:32): user pid=3447 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209218523.812:33): user pid=3447 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209218523.814:34): user pid=3447 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209218581.054:35): user pid=3856 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209218581.057:36): user pid=3856 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209218581.065:37): user pid=3856 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209218581.066:38): user pid=3856 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209218630.956:39): user pid=3856 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209218630.957:40): user pid=3856 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209218636.235:41): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3803 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209218641.982:7625): auditd normal halt, sending auid=0 pid=4163 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209218701.945:7042): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2060 res=success
>type=CONFIG_CHANGE msg=audit(1209218702.068:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209218737.543:5): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209218737.547:6): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209218737.579:7): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209218737.659:8): login pid=2745 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209218737.722:9): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209218738.446:10): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209218738.460:11): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209219251.315:12): user pid=3200 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209219251.316:13): user pid=3200 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209222061.677:14): user pid=3993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209222061.679:15): user pid=3993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209222061.680:16): login pid=3993 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209222061.682:17): user pid=3993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209222061.727:18): user pid=3993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209222061.728:19): user pid=3993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209222070.273:20): user pid=3997 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209222070.276:21): user pid=3997 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209222070.381:22): user pid=3997 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209222070.381:23): user pid=3997 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1209222893.038:24): user pid=3997 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209222893.039:25): user pid=3997 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209225661.754:26): user pid=4960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209225661.757:27): user pid=4960 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209225661.758:28): login pid=4960 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209225661.760:29): user pid=4960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209225661.765:30): user pid=4960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209225661.766:31): user pid=4960 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209225712.564:32): user pid=4979 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209226763.969:33): user pid=5281 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209229261.792:34): user pid=5887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209229261.794:35): user pid=5887 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209229261.794:36): login pid=5887 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209229261.797:37): user pid=5887 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209229261.802:38): user pid=5887 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209229261.802:39): user pid=5887 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209231222.419:40): user pid=6366 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209232861.821:41): user pid=6796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209232861.822:42): user pid=6796 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209232861.822:43): login pid=6796 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209232861.824:44): user pid=6796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209232861.838:45): user pid=6796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209232861.839:46): user pid=6796 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209233356.341:47): user pid=6927 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209236461.861:48): user pid=7673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209236461.862:49): user pid=7673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209236461.863:50): login pid=7673 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209236461.867:51): user pid=7673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209236461.875:52): user pid=7673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209236461.877:53): user pid=7673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209236473.306:54): user pid=7682 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209240061.911:55): user pid=8763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209240061.912:56): user pid=8763 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209240061.913:57): login pid=8763 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209240061.914:58): user pid=8763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209240061.918:59): user pid=8763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209240061.919:60): user pid=8763 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209243661.943:61): user pid=9625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209243661.944:62): user pid=9625 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209243661.945:63): login pid=9625 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209243661.947:64): user pid=9625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209243661.950:65): user pid=9625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209243661.951:66): user pid=9625 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209247261.970:67): user pid=10464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209247261.971:68): user pid=10464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209247261.971:69): login pid=10464 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209247261.974:70): user pid=10464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209247261.979:71): user pid=10464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209247261.980:72): user pid=10464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209249640.641:73): user pid=11027 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209250862.006:74): user pid=11350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209250862.007:75): user pid=11350 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209250862.007:76): login pid=11350 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209250862.009:77): user pid=11350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209250862.014:78): user pid=11350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209250862.015:79): user pid=11350 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209252612.107:80): user pid=11767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209252892.912:81): user pid=11858 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209252892.915:82): user pid=11858 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209254461.041:83): user pid=12344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209254461.043:84): user pid=12344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209254461.043:85): login pid=12344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1209254461.048:86): user pid=12344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209254461.055:87): user pid=12344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209254461.055:88): user pid=12344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209258061.077:89): user pid=13181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209258061.078:90): user pid=13181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209258061.078:91): login pid=13181 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1209258061.079:92): user pid=13181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209258061.083:93): user pid=13181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209258061.083:94): user pid=13181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209258121.091:95): user pid=13199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209258121.092:96): user pid=13199 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209258121.092:97): login pid=13199 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1209258121.097:98): user pid=13199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209259321.107:99): user pid=13496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209259321.109:100): user pid=13496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209259321.110:101): login pid=13496 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1209259321.113:102): user pid=13496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209259559.879:103): avc:  denied  { setattr } for  pid=14679 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209259559.879:103): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfa9ad94 a2=0 a3=9931530 items=0 ppid=14677 pid=14679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209259559.881:104): avc:  denied  { setattr } for  pid=14679 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209259559.881:104): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfa9ad94 a2=0 a3=9931530 items=0 ppid=14677 pid=14679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209259559.881:105): avc:  denied  { setattr } for  pid=14679 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209259559.881:105): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfa9aff4 a2=0 a3=992f4f0 items=0 ppid=14677 pid=14679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1209259560.661:106): user pid=13199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209259560.662:107): user pid=13199 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209260764.579:108): user pid=13496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209260764.580:109): user pid=13496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209261661.594:110): user pid=22241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209261661.595:111): user pid=22241 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209261661.596:112): login pid=22241 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_START msg=audit(1209261661.600:113): user pid=22241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209261661.605:114): user pid=22241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209261661.605:115): user pid=22241 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209265261.628:116): user pid=23078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209265261.630:117): user pid=23078 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209265261.630:118): login pid=23078 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_START msg=audit(1209265261.633:119): user pid=23078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209265261.640:120): user pid=23078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209265261.640:121): user pid=23078 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209268861.662:122): user pid=23920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209268861.663:123): user pid=23920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209268861.664:124): login pid=23920 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_START msg=audit(1209268861.665:125): user pid=23920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209268861.669:126): user pid=23920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209268861.670:127): user pid=23920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209272461.693:128): user pid=24758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209272461.695:129): user pid=24758 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209272461.695:130): login pid=24758 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_START msg=audit(1209272461.697:131): user pid=24758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209272461.701:132): user pid=24758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209272461.701:133): user pid=24758 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209276061.724:134): user pid=25599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209276061.724:135): user pid=25599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209276061.724:136): login pid=25599 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_START msg=audit(1209276061.726:137): user pid=25599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209276061.729:138): user pid=25599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209276061.730:139): user pid=25599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209277312.156:140): user pid=25901 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209277410.867:141): user pid=25972 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209277410.870:142): user pid=25972 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209279661.897:143): user pid=26558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209279661.899:144): user pid=26558 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209279661.899:145): login pid=26558 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
>type=USER_START msg=audit(1209279661.926:146): user pid=26558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209279661.932:147): user pid=26558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209279661.933:148): user pid=26558 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209283229.383:149): user pid=27407 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209283247.022:150): user pid=27420 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_ACCT msg=audit(1209283261.957:151): user pid=27427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209283261.958:152): user pid=27427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209283261.959:153): login pid=27427 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
>type=USER_START msg=audit(1209283261.961:154): user pid=27427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209283261.967:155): user pid=27427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209283261.967:156): user pid=27427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209285735.605:157): user pid=28007 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209286861.990:158): user pid=28272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209286861.993:159): user pid=28272 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209286861.994:160): login pid=28272 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22
>type=USER_START msg=audit(1209286861.997:161): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209286862.002:162): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209286862.003:163): user pid=28272 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209288102.536:164): user pid=28570 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209288102.539:165): user pid=28570 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209288102.604:166): user pid=28570 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209288102.605:167): user pid=28570 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209290461.055:168): user pid=29166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209290461.057:169): user pid=29166 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209290461.058:170): login pid=29166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23
>type=USER_START msg=audit(1209290461.062:171): user pid=29166 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209290461.079:172): user pid=29166 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209290461.080:173): user pid=29166 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209291948.242:174): user pid=29521 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209292937.867:175): user pid=28570 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209292937.870:176): user pid=28570 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209293032.968:177): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3034 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209293033.032:178): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209293033.230:179): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209293056.780:180): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=30035 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209293077.106:181): user pid=2556 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209293077.109:182): user pid=2556 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209293077.110:183): login pid=2556 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24
>type=USER_ROLE_CHANGE msg=audit(1209293077.198:184): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209293077.260:185): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209293077.261:186): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209293077.262:187): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209293175.261:188): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=30237 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209293189.113:189): user pid=30707 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209293189.116:190): user pid=30707 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209293189.120:191): user pid=30707 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209293189.191:192): login pid=30707 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=25
>type=USER_ROLE_CHANGE msg=audit(1209293189.298:193): user pid=30707 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209293189.836:194): user pid=30707 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209293189.838:195): user pid=30707 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209293259.788:196): user pid=31340 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209293259.791:197): user pid=31340 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209293260.087:198): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=31281 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209293260.150:199): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209293260.152:200): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209293266.746:7043): auditd normal halt, sending auid=0 pid=31622 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209293329.967:1168): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2062 res=success
>type=CONFIG_CHANGE msg=audit(1209293330.076:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209294061.254:5): user pid=2804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209294061.257:6): user pid=2804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209294061.258:7): login pid=2804 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209294061.293:8): user pid=2804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209294061.348:9): user pid=2804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209294061.349:10): user pid=2804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209294337.304:11): user pid=2558 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209294337.306:12): user pid=2558 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209294337.306:13): login pid=2558 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209294337.416:14): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209294337.479:15): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209294337.506:16): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209294337.507:17): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209294546.801:18): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209294546.803:19): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209294553.173:1169): auditd normal halt, sending auid=0 pid=3473 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209294612.845:4384): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2068 res=success
>type=CONFIG_CHANGE msg=audit(1209294612.970:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USYS_CONFIG msg=audit(1209296866.499:5): user pid=2907 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209297206.758:6): user pid=3060 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=DAEMON_END msg=audit(1209297247.349:4385): auditd normal halt, sending auid=0 pid=3397 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209297305.868:4498): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2058 res=success
>type=CONFIG_CHANGE msg=audit(1209297305.990:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209297661.959:5): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209297661.962:6): user pid=2790 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209297661.963:7): login pid=2790 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209297661.996:8): user pid=2790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209297662.052:9): user pid=2790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209297662.054:10): user pid=2790 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209301261.076:11): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209301261.077:12): user pid=2895 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209301261.077:13): login pid=2895 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209301261.081:14): user pid=2895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209301261.088:15): user pid=2895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209301261.089:16): user pid=2895 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209304566.997:17): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209304567.095:18): user pid=2744 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=USER_ACCT msg=audit(1209304861.111:19): user pid=3002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209304861.112:20): user pid=3002 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209304861.112:21): login pid=3002 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209304861.116:22): user pid=3002 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209304861.124:23): user pid=3002 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209304861.126:24): user pid=3002 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209308461.148:25): user pid=3106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209308461.149:26): user pid=3106 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209308461.149:27): login pid=3106 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209308461.151:28): user pid=3106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209308461.155:29): user pid=3106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209308461.155:30): user pid=3106 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=DAEMON_END msg=audit(1209309151.038:4499): auditd normal halt, sending auid=0 pid=3399 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209314167.935:3208): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2057 res=success
>type=CONFIG_CHANGE msg=audit(1209314168.059:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209314210.054:5): user pid=2743 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209314210.058:6): user pid=2743 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209314210.152:7): user pid=2743 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209314210.237:8): login pid=2743 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209314210.281:9): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209314211.070:10): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209314211.085:11): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209314528.910:12): user pid=3213 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209314528.914:13): user pid=3213 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209314529.022:14): user pid=3213 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209314529.024:15): user pid=3213 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209314740.828:16): user pid=3213 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209314740.831:17): user pid=3213 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209314745.906:18): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3035 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209314745.976:19): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209314746.019:20): user pid=2743 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209314756.278:21): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=3519 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209314770.923:22): user pid=3607 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209314770.927:23): user pid=3607 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209314770.931:24): user pid=3607 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209314771.003:25): login pid=3607 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209314771.027:26): user pid=3607 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209314771.366:27): user pid=3607 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209314771.368:28): user pid=3607 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209315661.351:29): user pid=4018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209315661.354:30): user pid=4018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209315661.354:31): login pid=4018 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209315661.356:32): user pid=4018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209315661.380:33): user pid=4018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209315661.381:34): user pid=4018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209315911.045:35): user pid=4031 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209319261.403:36): user pid=4184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209319261.405:37): user pid=4184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209319261.405:38): login pid=4184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209319261.409:39): user pid=4184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209319261.415:40): user pid=4184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209319261.415:41): user pid=4184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209319711.265:42): user pid=4204 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209319729.500:43): user pid=4279 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209319869.731:44): user pid=4347 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209319904.650:45): user pid=4492 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209319932.500:46): user pid=4551 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209320284.760:47): user pid=4690 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209320542.145:48): user pid=4784 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209321792.384:49): user pid=4835 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209322081.387:50): user pid=4850 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209322187.933:51): user pid=4890 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209322187.936:52): user pid=4890 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209322187.944:53): user pid=4890 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209322187.945:54): user pid=4890 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209322375.172:55): user pid=4890 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209322375.174:56): user pid=4890 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209322388.508:57): user pid=4986 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209322742.825:58): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3966 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209322748.791:3209): auditd normal halt, sending auid=0 pid=5227 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209322807.912:7942): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2061 res=success
>type=CONFIG_CHANGE msg=audit(1209322808.034:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209322861.711:5): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209322861.713:6): user pid=2786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209322861.714:7): login pid=2786 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209322861.749:8): user pid=2786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209322861.804:9): user pid=2786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209322861.806:10): user pid=2786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209322925.542:11): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209322925.546:12): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209322925.638:13): user pid=2747 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209322925.726:14): login pid=2747 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209322925.770:15): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209322926.487:16): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209322926.529:17): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209322977.381:18): user pid=3066 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209323837.734:19): user pid=3176 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209323837.737:20): user pid=3176 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209323837.848:21): user pid=3176 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209323837.849:22): user pid=3176 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1209324161.500:23): user pid=3325 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209324526.803:24): user pid=3505 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209324536.834:25): user pid=3553 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209325239.561:26): user pid=3633 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209325239.562:27): user pid=3633 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209325338.938:28): user pid=3176 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209325338.941:29): user pid=3176 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209325348.701:30): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3039 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209325349.688:31): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209325349.726:32): user pid=2747 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209325365.510:33): user pid=3749 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209325365.513:34): user pid=3749 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209325365.517:35): user pid=3749 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209325365.598:36): login pid=3749 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209325365.621:37): user pid=3749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209325366.010:38): user pid=3749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209325366.011:39): user pid=3749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209325368.411:40): user pid=4028 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209325368.425:41): user pid=4028 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209325416.888:42): user pid=3749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209325417.057:43): user pid=3749 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209325417.123:44): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4110 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209325430.311:45): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=4316 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209325449.687:46): user pid=4405 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209325449.690:47): user pid=4405 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209325449.694:48): user pid=4405 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209325449.761:49): login pid=4405 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209325449.796:50): user pid=4405 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209325449.851:51): user pid=4405 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209325449.852:52): user pid=4405 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209325453.745:53): user pid=4730 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209325453.748:54): user pid=4730 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209325533.899:55): user pid=4405 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209325533.912:56): user pid=4405 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209325533.982:57): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4796 comm="tomboy" sig=11
>type=USER_AUTH msg=audit(1209325556.391:58): user pid=2557 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209325556.394:59): user pid=2557 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209325556.394:60): login pid=2557 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1209325556.406:61): user pid=2557 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209325556.436:62): user pid=2557 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209325556.437:63): user pid=2557 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209325556.438:64): user pid=2557 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209325568.937:65): user pid=2555 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1209325568.939:66): user pid=2555 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1209325568.940:67): login pid=2555 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1209325568.954:68): user pid=2555 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1209325568.985:69): user pid=2555 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1209325568.986:70): user pid=2555 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1209325568.990:71): user pid=2555 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=ANOM_ABEND msg=audit(1209325617.329:72): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=5021 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209325633.694:73): user pid=5994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209325633.698:74): user pid=5994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209325633.703:75): user pid=5994 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209325633.775:76): login pid=5994 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1209325633.794:77): user pid=5994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209325633.874:78): user pid=5994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209325633.875:79): user pid=5994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209325637.832:80): user pid=6538 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209325637.834:81): user pid=6538 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209325657.788:82): user pid=5994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209325657.824:83): user pid=5994 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209325657.905:84): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=6616 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209325768.715:85): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=7063 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209325788.613:86): user pid=7875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209325788.616:87): user pid=7875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209325788.622:88): user pid=7875 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209325788.697:89): login pid=7875 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=8
>type=USER_ROLE_CHANGE msg=audit(1209325788.716:90): user pid=7875 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209325788.813:91): user pid=7875 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209325788.815:92): user pid=7875 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209325793.414:93): user pid=8429 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209325793.417:94): user pid=8429 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209325803.990:95): user pid=7875 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209325804.007:96): user pid=7875 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209325888.570:97): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=8938 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209325912.700:98): user pid=9527 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209325912.704:99): user pid=9527 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209325912.709:100): user pid=9527 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209325912.783:101): login pid=9527 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=9
>type=USER_ROLE_CHANGE msg=audit(1209325912.802:102): user pid=9527 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209325912.904:103): user pid=9527 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209325912.905:104): user pid=9527 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209325917.997:105): user pid=10066 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209325917.998:106): user pid=10066 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209326461.041:107): user pid=10367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209326461.042:108): user pid=10367 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209326461.042:109): login pid=10367 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209326461.045:110): user pid=10367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209326461.051:111): user pid=10367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209326461.052:112): user pid=10367 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209326929.059:113): user pid=10841 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209326929.061:114): user pid=10841 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209326929.408:115): auid=500 uid=500 gid=500 ses=9 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=10168 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209326929.475:116): user pid=2555 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1209326929.477:117): user pid=2555 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1209326929.481:118): user pid=2557 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209326929.481:119): user pid=2557 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209326935.302:7943): auditd normal halt, sending auid=0 pid=11128 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209327008.779:9638): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2062 res=success
>type=CONFIG_CHANGE msg=audit(1209327008.901:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209327934.083:5): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209327934.087:6): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209327934.190:7): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209327934.284:8): login pid=2748 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209327934.332:9): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209327935.100:10): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209327935.115:11): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209327941.061:12): user pid=3011 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209327941.062:13): user pid=3011 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209330061.124:14): user pid=3706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209330061.127:15): user pid=3706 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209330061.127:16): login pid=3706 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209330061.129:17): user pid=3706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209330061.176:18): user pid=3706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209330061.177:19): user pid=3706 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209333661.200:20): user pid=4575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209333661.201:21): user pid=4575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209333661.201:22): login pid=4575 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209333661.204:23): user pid=4575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209333661.208:24): user pid=4575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209333661.209:25): user pid=4575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209337261.233:26): user pid=5406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209337261.233:27): user pid=5406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209337261.233:28): login pid=5406 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209337261.235:29): user pid=5406 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209337261.238:30): user pid=5406 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209337261.239:31): user pid=5406 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209340861.260:32): user pid=6234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209340861.261:33): user pid=6234 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209340861.261:34): login pid=6234 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209340861.263:35): user pid=6234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209340861.266:36): user pid=6234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209340861.266:37): user pid=6234 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209344461.288:38): user pid=7065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209344461.289:39): user pid=7065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209344461.289:40): login pid=7065 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209344461.292:41): user pid=7065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209344461.301:42): user pid=7065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209344461.302:43): user pid=7065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209344521.308:44): user pid=7083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209344521.309:45): user pid=7083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209344521.309:46): login pid=7083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209344521.310:47): user pid=7083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209345946.693:48): avc:  denied  { setattr } for  pid=8236 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209345946.693:48): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf92e274 a2=0 a3=87fb530 items=0 ppid=8234 pid=8236 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209345946.694:49): avc:  denied  { setattr } for  pid=8236 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209345946.694:49): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf92e274 a2=0 a3=87fb530 items=0 ppid=8234 pid=8236 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209345946.694:50): avc:  denied  { setattr } for  pid=8236 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209345946.694:50): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf92e4d4 a2=0 a3=87f94f0 items=0 ppid=8234 pid=8236 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1209345947.336:51): user pid=7083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209345947.337:52): user pid=7083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209348061.355:53): user pid=8762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209348061.356:54): user pid=8762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209348061.356:55): login pid=8762 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209348061.359:56): user pid=8762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209348061.365:57): user pid=8762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209348061.366:58): user pid=8762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209351661.388:59): user pid=9593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209351661.389:60): user pid=9593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209351661.389:61): login pid=9593 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209351661.394:62): user pid=9593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209351661.402:63): user pid=9593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209351661.403:64): user pid=9593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209355261.426:65): user pid=10423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209355261.426:66): user pid=10423 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209355261.427:67): login pid=10423 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209355261.428:68): user pid=10423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209355261.431:69): user pid=10423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209355261.432:70): user pid=10423 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209358861.454:71): user pid=11255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209358861.456:72): user pid=11255 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209358861.457:73): login pid=11255 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1209358861.459:74): user pid=11255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209358861.465:75): user pid=11255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209358861.465:76): user pid=11255 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209362461.487:77): user pid=12084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209362461.488:78): user pid=12084 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209362461.488:79): login pid=12084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1209362461.490:80): user pid=12084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209362461.493:81): user pid=12084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209362461.493:82): user pid=12084 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209366061.515:83): user pid=12916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209366061.516:84): user pid=12916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209366061.516:85): login pid=12916 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1209366061.517:86): user pid=12916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209366061.521:87): user pid=12916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209366061.521:88): user pid=12916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209369488.723:89): user pid=13716 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209369495.800:90): user pid=13723 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209369661.545:91): user pid=13771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209369661.546:92): user pid=13771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209369661.546:93): login pid=13771 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1209369661.547:94): user pid=13771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209369661.551:95): user pid=13771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209369661.551:96): user pid=13771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209373261.575:97): user pid=14772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209373261.577:98): user pid=14772 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209373261.577:99): login pid=14772 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_START msg=audit(1209373261.582:100): user pid=14772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209373261.587:101): user pid=14772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209373261.588:102): user pid=14772 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209376861.612:103): user pid=15615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209376861.613:104): user pid=15615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209376861.613:105): login pid=15615 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_START msg=audit(1209376861.616:106): user pid=15615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209376861.619:107): user pid=15615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209376861.620:108): user pid=15615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209380461.642:109): user pid=16468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209380461.643:110): user pid=16468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209380461.643:111): login pid=16468 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_START msg=audit(1209380461.646:112): user pid=16468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209380461.649:113): user pid=16468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209380461.650:114): user pid=16468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209384061.672:115): user pid=17322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209384061.674:116): user pid=17322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209384061.674:117): login pid=17322 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_START msg=audit(1209384061.678:118): user pid=17322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209384061.685:119): user pid=17322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209384061.685:120): user pid=17322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209387661.707:121): user pid=18164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209387661.708:122): user pid=18164 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209387661.708:123): login pid=18164 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_START msg=audit(1209387661.710:124): user pid=18164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209387661.713:125): user pid=18164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209387661.713:126): user pid=18164 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209390355.949:127): user pid=18802 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209391261.735:128): user pid=19057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209391261.737:129): user pid=19057 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209391261.738:130): login pid=19057 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
>type=USER_START msg=audit(1209391261.741:131): user pid=19057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209391261.747:132): user pid=19057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209391261.748:133): user pid=19057 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1209391766.046:134): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3065 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209391766.093:135): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209391766.103:136): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209391789.043:137): user pid=2558 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209391789.046:138): user pid=2558 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209391789.046:139): login pid=2558 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
>type=USER_ROLE_CHANGE msg=audit(1209391789.058:140): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209391789.201:141): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209391789.202:142): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209391789.203:143): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209391855.846:144): user pid=19307 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209391855.849:145): user pid=19307 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209391855.853:146): user pid=19307 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209391855.941:147): login pid=19307 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=22
>type=USER_ROLE_CHANGE msg=audit(1209391855.965:148): user pid=19307 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209391856.338:149): user pid=19307 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209391856.339:150): user pid=19307 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209391858.934:151): user pid=20162 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209391858.935:152): user pid=20162 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209392495.035:153): user pid=19307 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209392495.068:154): user pid=19307 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209392495.140:155): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=20215 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209392507.145:156): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=21083 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209392726.767:157): user pid=21317 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209392726.770:158): user pid=21317 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209392726.774:159): user pid=21317 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209392726.845:160): login pid=21317 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=23
>type=USER_ROLE_CHANGE msg=audit(1209392726.874:161): user pid=21317 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209392727.205:162): user pid=21317 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209392727.206:163): user pid=21317 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209392729.708:164): user pid=22260 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209392729.709:165): user pid=22260 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209392832.265:166): user pid=21317 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209392832.342:167): user pid=21317 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209392832.482:168): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=22341 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209393106.920:169): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209393106.923:170): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209393113.896:9639): auditd normal halt, sending auid=0 pid=23995 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209393177.961:2125): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=2063 res=success
>type=CONFIG_CHANGE msg=audit(1209393178.087:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209394861.500:5): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209394861.503:6): user pid=2833 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209394861.504:7): login pid=2833 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209394861.538:8): user pid=2833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209394861.582:9): user pid=2833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209394861.583:10): user pid=2833 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209398461.605:11): user pid=2938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209398461.607:12): user pid=2938 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209398461.608:13): login pid=2938 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209398461.610:14): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209398461.618:15): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209398461.620:16): user pid=2938 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209400589.994:17): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209400590.247:18): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=USER_ACCT msg=audit(1209402061.641:19): user pid=3043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209402061.642:20): user pid=3043 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209402061.642:21): login pid=3043 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209402061.644:22): user pid=3043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209402061.647:23): user pid=3043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209402061.648:24): user pid=3043 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209402670.079:25): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209402670.080:26): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=USER_ACCT msg=audit(1209405661.670:27): user pid=3148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209405661.672:28): user pid=3148 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209405661.672:29): login pid=3148 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209405661.675:30): user pid=3148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209405661.681:31): user pid=3148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209405661.681:32): user pid=3148 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209409103.639:33): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209409103.642:34): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209409103.680:35): user pid=2748 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209409103.766:36): login pid=2748 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1209409103.819:37): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209409104.483:38): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209409104.484:39): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209409111.655:40): user pid=3458 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209409111.657:41): user pid=3458 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209409261.712:42): user pid=3598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209409261.715:43): user pid=3598 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209409261.716:44): login pid=3598 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209409261.719:45): user pid=3598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209409261.726:46): user pid=3598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209409261.727:47): user pid=3598 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209409302.454:48): user pid=2559 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209409302.456:49): user pid=2559 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209409302.457:50): login pid=2559 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1209409302.468:51): user pid=2559 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209409302.502:52): user pid=2559 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209409302.503:53): user pid=2559 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209409302.508:54): user pid=2559 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209409324.137:55): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209409324.202:56): user pid=2748 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209409324.379:57): auid=500 uid=500 gid=500 ses=5 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3539 comm="tomboy" sig=11
>type=USER_AUTH msg=audit(1209409462.656:58): user pid=4130 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209409462.659:59): user pid=4130 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209409462.663:60): user pid=4130 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209409462.744:61): login pid=4130 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=8
>type=USER_ROLE_CHANGE msg=audit(1209409462.772:62): user pid=4130 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209409463.022:63): user pid=4130 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209409463.024:64): user pid=4130 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209409613.474:65): user pid=5175 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209409613.475:66): user pid=5175 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209410131.984:67): user pid=5398 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209410131.988:68): user pid=5398 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209410132.016:69): user pid=5398 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209410132.017:70): user pid=5398 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209412861.754:71): user pid=6246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209412861.757:72): user pid=6246 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209412861.758:73): login pid=6246 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209412861.760:74): user pid=6246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209412861.768:75): user pid=6246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209412861.769:76): user pid=6246 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209416461.795:77): user pid=7220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209416461.797:78): user pid=7220 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209416461.798:79): login pid=7220 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209416461.800:80): user pid=7220 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209416461.806:81): user pid=7220 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209416461.806:82): user pid=7220 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209418356.353:83): user pid=5398 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209418356.357:84): user pid=5398 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209418475.407:85): auid=500 uid=500 gid=500 ses=5 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=5102 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209418475.467:86): user pid=4130 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209418475.484:87): user pid=4130 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209418529.881:88): user pid=8076 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209418529.885:89): user pid=8076 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209418529.889:90): user pid=8076 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209418529.969:91): login pid=8076 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=11
>type=USER_ROLE_CHANGE msg=audit(1209418529.991:92): user pid=8076 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209418530.331:93): user pid=8076 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209418530.333:94): user pid=8076 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209418551.939:95): user pid=9037 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209418551.939:96): user pid=9037 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209418551.978:97): user pid=9037 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209418631.929:98): user pid=9037 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209418645.960:99): user pid=10023 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209418645.963:100): user pid=10023 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209418646.317:101): auid=500 uid=500 gid=500 ses=5 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=9015 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209418646.350:102): user pid=2559 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209418646.352:103): user pid=2559 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209418652.254:2126): auditd normal halt, sending auid=0 pid=10315 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209418704.143:8930): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1882 res=success
>type=CONFIG_CHANGE msg=audit(1209418704.266:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209418744.525:5): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209418744.556:6): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=USER_AUTH msg=audit(1209418757.910:7): user pid=2396 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209418757.912:8): user pid=2396 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209418757.913:9): login pid=2396 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209418757.955:10): user pid=2396 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209418758.037:11): user pid=2396 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209418758.055:12): user pid=2396 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209418758.056:13): user pid=2396 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209418990.049:14): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209418990.052:15): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209418990.056:16): user pid=2590 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209418990.138:17): login pid=2590 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209418990.184:18): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209418990.935:19): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209418990.937:20): user pid=2590 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209419068.266:21): user pid=3772 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209419068.266:22): user pid=3772 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209419068.389:23): user pid=3772 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209419119.960:24): user pid=3772 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209419188.038:25): user pid=3901 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209419188.039:26): user pid=3901 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209419188.049:27): user pid=3901 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209419255.941:28): user pid=3901 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209419272.670:29): user pid=4837 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209419272.672:30): user pid=4837 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209419273.056:31): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3701 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209419273.096:32): user pid=2396 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209419273.098:33): user pid=2396 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209419278.821:8931): auditd normal halt, sending auid=0 pid=5114 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209419331.121:2006): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1876 res=success
>type=CONFIG_CHANGE msg=audit(1209419331.245:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209419365.961:5): user pid=2600 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209419365.971:6): user pid=2600 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209419366.003:7): user pid=2600 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209419366.116:8): login pid=2600 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209419366.157:9): user pid=2600 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209419366.957:10): user pid=2600 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209419366.973:11): user pid=2600 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209419480.157:12): user pid=3101 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209419480.160:13): user pid=3101 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209419480.264:14): user pid=3101 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209419480.265:15): user pid=3101 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209419737.000:16): user pid=3484 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209419737.001:17): user pid=3484 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209419737.006:18): user pid=3484 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209419760.026:19): user pid=3484 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209419804.985:20): user pid=3101 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209419804.989:21): user pid=3101 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209419831.861:22): user pid=4489 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209419831.862:23): user pid=4489 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209420061.168:24): user pid=4824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209420061.170:25): user pid=4824 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209420061.171:26): login pid=4824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209420061.173:27): user pid=4824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209420061.251:28): user pid=4824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209420061.251:29): user pid=4824 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209423661.276:30): user pid=22518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209423661.278:31): user pid=22518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209423661.279:32): login pid=22518 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209423661.287:33): user pid=22518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209423661.297:34): user pid=22518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209423661.298:35): user pid=22518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209424670.211:36): avc:  denied  { setattr } for  pid=24472 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209424670.211:36): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bff98ad4 a2=0 a3=8a47530 items=0 ppid=24470 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209424670.214:37): avc:  denied  { setattr } for  pid=24472 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209424670.214:37): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bff98ad4 a2=0 a3=8a47530 items=0 ppid=24470 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209424670.215:38): avc:  denied  { setattr } for  pid=24472 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209424670.215:38): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bff98d34 a2=0 a3=8a454f0 items=0 ppid=24470 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_AUTH msg=audit(1209424808.635:39): user pid=24676 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209424952.500:40): user pid=24966 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209445854.000:41): user pid=25109 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209445854.721:42): auid=500 uid=0 gid=0 ses=1 subj=unconfined_u:system_r:NetworkManager_t:s0 pid=4334 comm="NetworkManager" sig=6
>type=USER_AUTH msg=audit(1209445872.151:43): user pid=25173 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209448861.413:44): user pid=26623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209448861.415:45): user pid=26623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209448861.415:46): login pid=26623 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209448861.453:47): user pid=26623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209448861.508:48): user pid=26623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209448861.509:49): user pid=26623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209452381.111:50): user pid=28257 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209452461.532:51): user pid=28332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209452461.534:52): user pid=28332 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209452461.534:53): login pid=28332 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209452461.538:54): user pid=28332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209452461.545:55): user pid=28332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209452461.546:56): user pid=28332 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=DAEMON_START msg=audit(1209541703.902:7313): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1941 res=success
>type=CONFIG_CHANGE msg=audit(1209541704.024:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209541756.104:5): user pid=2459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1209541756.191:6): user pid=2459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1209541763.444:7): user pid=2459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209541763.446:8): user pid=2459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209541763.447:9): login pid=2459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209541763.553:10): user pid=2459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209541763.631:11): user pid=2459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209541763.642:12): user pid=2459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209541763.643:13): user pid=2459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209541837.631:14): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209541837.635:15): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209541837.639:16): user pid=2654 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209541837.725:17): login pid=2654 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209541837.751:18): user pid=2654 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209541838.513:19): user pid=2654 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209541838.516:20): user pid=2654 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209541844.407:21): user pid=3575 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209541844.408:22): user pid=3575 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1209542272.948:23): user pid=4315 uid=0 auid=4294967295 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="wbpriv" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AVC msg=audit(1209542390.894:24): user pid=2065 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1209542390.004:25): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1209542390.004:25): arch=40000003 syscall=4 success=yes exit=3819299 a0=4 a1=b781f008 a2=3a4723 a3=bfb79698 items=0 ppid=4510 pid=4528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1209542461.394:26): user pid=4661 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209542461.397:27): user pid=4661 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209542461.398:28): login pid=4661 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209542461.401:29): user pid=4661 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209542461.544:30): user pid=4661 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209542461.546:31): user pid=4661 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209542957.861:32): user pid=5281 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209542957.864:33): user pid=5281 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209542958.043:34): user pid=2459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209542958.045:35): user pid=2459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209542958.235:36): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3657 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209542965.476:7314): auditd normal halt, sending auid=0 pid=5574 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209543023.710:4451): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1876 res=success
>type=CONFIG_CHANGE msg=audit(1209543023.832:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209543838.878:5): user pid=2406 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209543838.881:6): user pid=2406 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209543838.881:7): login pid=2406 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209543838.981:8): user pid=2406 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209543839.078:9): user pid=2406 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209543839.079:10): user pid=2406 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209543839.080:11): user pid=2406 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209543953.211:12): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2636 comm="metacity" sig=6
>type=ANOM_ABEND msg=audit(1209543992.563:13): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=4115 comm="metacity" sig=6
>type=ANOM_ABEND msg=audit(1209544456.381:14): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=4963 comm="metacity" sig=6
>type=CRED_DISP msg=audit(1209544486.786:15): user pid=2406 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209544486.788:16): user pid=2406 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209544493.813:4452): auditd normal halt, sending auid=0 pid=6623 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209544546.966:681): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1871 res=success
>type=CONFIG_CHANGE msg=audit(1209544547.090:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209544607.695:5): user pid=2401 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209544607.698:6): user pid=2401 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209544607.699:7): login pid=2401 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209544607.742:8): user pid=2401 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209544607.830:9): user pid=2401 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209544607.854:10): user pid=2401 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209544607.855:11): user pid=2401 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209545943.721:12): user pid=2401 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209545943.723:13): user pid=2401 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209545950.843:682): auditd normal halt, sending auid=0 pid=4514 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209546004.365:1484): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1872 res=success
>type=CONFIG_CHANGE msg=audit(1209546004.489:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209546045.006:5): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209546045.009:6): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209546045.009:7): login pid=2421 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209546045.112:8): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209546045.205:9): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209546045.225:10): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209546045.226:11): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209546062.160:12): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209546062.163:13): user pid=2983 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209546062.164:14): login pid=2983 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209546062.165:15): user pid=2983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209546062.210:16): user pid=2983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209546062.211:17): user pid=2983 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1209546574.188:18): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2655 comm="metacity" sig=6
>type=ANOM_ABEND msg=audit(1209546672.221:19): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=4315 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209546687.623:20): user pid=5086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209546687.626:21): user pid=5086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209546687.630:22): user pid=5086 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209546687.704:23): login pid=5086 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209546687.726:24): user pid=5086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209546688.455:25): user pid=5086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209546688.492:26): user pid=5086 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209546694.072:27): user pid=5642 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209546694.074:28): user pid=5642 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209547882.163:29): user pid=7162 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209547882.166:30): user pid=7162 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209547882.422:31): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=5726 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209547882.511:32): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209547882.513:33): user pid=2421 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209547889.492:1485): auditd normal halt, sending auid=0 pid=7467 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209547942.855:6682): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1890 res=success
>type=CONFIG_CHANGE msg=audit(1209547942.979:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209549662.073:5): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209549662.075:6): user pid=3848 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209549662.076:7): login pid=3848 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209549662.110:8): user pid=3848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209549662.166:9): user pid=3848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209549662.167:10): user pid=3848 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209549920.909:11): user pid=2632 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209549920.912:12): user pid=2632 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209549921.009:13): user pid=2632 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209549921.108:14): login pid=2632 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209549921.158:15): user pid=2632 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209549921.932:16): user pid=2632 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209549921.975:17): user pid=2632 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209549927.643:18): user pid=4234 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209549927.644:19): user pid=4234 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209552738.541:20): user pid=7696 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209552738.543:21): user pid=7696 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USYS_CONFIG msg=audit(1209552740.500:22): user pid=7754 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209553059.815:23): user pid=7873 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209553060.112:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0 pid=2201 comm="NetworkManager" sig=6
>type=USYS_CONFIG msg=audit(1209553125.499:25): user pid=8062 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209553567.515:26): user pid=8210 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209553594.874:27): user pid=9493 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209553616.023:28): user pid=9503 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209553616.024:29): user pid=9503 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209553616.325:30): user pid=9503 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1209553770.688:31): avc:  denied  { setattr } for  pid=12304 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209553770.688:31): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfe72714 a2=0 a3=85ea530 items=0 ppid=12302 pid=12304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209553770.691:32): avc:  denied  { setattr } for  pid=12304 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209553770.691:32): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfe72714 a2=0 a3=85ea530 items=0 ppid=12302 pid=12304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209553770.692:33): avc:  denied  { setattr } for  pid=12304 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209553770.692:33): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfe72974 a2=0 a3=85e84f0 items=0 ppid=12302 pid=12304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_END msg=audit(1209553858.385:34): user pid=9503 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209554091.050:35): user pid=2439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209554091.052:36): user pid=2439 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209554091.053:37): login pid=2439 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209554091.065:38): user pid=2439 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209554091.098:39): user pid=2439 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209554091.099:40): user pid=2439 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209554091.104:41): user pid=2439 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209554591.913:42): user pid=13552 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209554783.696:43): user pid=13795 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209554783.699:44): user pid=13795 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209554783.707:45): user pid=13795 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209554783.708:46): user pid=13795 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1209556005.749:47): user pid=13795 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209556005.750:48): user pid=13795 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1209556017.228:49): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4303 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209556017.341:50): user pid=2632 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209556017.361:51): user pid=2632 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=DAEMON_END msg=audit(1209556201.786:6683): auditd normal halt, sending auid=0 pid=16251 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209556252.900:8019): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1876 res=success
>type=CONFIG_CHANGE msg=audit(1209556253.024:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209556337.022:5): user pid=2618 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209556337.026:6): user pid=2618 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209556337.113:7): user pid=2618 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209556337.208:8): login pid=2618 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209556337.255:9): user pid=2618 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209556338.101:10): user pid=2618 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209556338.116:11): user pid=2618 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209556344.085:12): user pid=2912 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209556344.086:13): user pid=2912 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209556402.855:14): user pid=3080 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209556861.328:15): user pid=3577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209556861.331:16): user pid=3577 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209556861.332:17): login pid=3577 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209556861.336:18): user pid=3577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209556861.389:19): user pid=3577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209556861.389:20): user pid=3577 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1209559023.394:21): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=2958 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209559023.426:22): user pid=2618 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209559023.435:23): user pid=2618 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209559043.661:24): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1209559043.739:25): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1209559055.194:26): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1209559055.195:27): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1209559083.830:28): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1209559083.831:29): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1209559088.496:30): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1209559088.497:31): user pid=2425 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=(unknown): exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1209559103.515:32): user pid=5859 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209559103.517:33): user pid=5859 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209559103.518:34): login pid=5859 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209559103.530:35): user pid=5859 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209559103.560:36): user pid=5859 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209559103.560:37): user pid=5859 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209559103.561:38): user pid=5859 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209559198.815:39): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=5759 comm="metacity" sig=6
>type=ANOM_ABEND msg=audit(1209559229.388:40): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=6793 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209559243.063:41): user pid=7457 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209559243.067:42): user pid=7457 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209559243.071:43): user pid=7457 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209559243.143:44): login pid=7457 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209559243.165:45): user pid=7457 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209559243.504:46): user pid=7457 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209559243.506:47): user pid=7457 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209559246.697:48): user pid=8018 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209559246.698:49): user pid=8018 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209559476.782:50): user pid=8368 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209559476.785:51): user pid=8368 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209559477.084:52): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=8067 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209559477.143:53): user pid=5859 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209559477.145:54): user pid=5859 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209559484.151:8020): auditd normal halt, sending auid=0 pid=8665 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209559535.623:5798): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1879 res=success
>type=CONFIG_CHANGE msg=audit(1209559535.746:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209559919.725:5): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209559919.729:6): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209559919.816:7): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209559919.886:8): login pid=2619 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209559919.924:9): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209559920.792:10): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209559920.808:11): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209559926.643:12): user pid=3112 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209559926.644:13): user pid=3112 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209560461.767:14): user pid=3914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209560461.770:15): user pid=3914 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209560461.770:16): login pid=3914 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209560461.778:17): user pid=3914 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209560461.836:18): user pid=3914 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209560461.836:19): user pid=3914 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209562063.298:20): user pid=5759 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209562063.301:21): user pid=5759 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209562063.408:22): user pid=5759 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209562063.409:23): user pid=5759 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209563208.739:24): user pid=7120 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209563679.842:25): user pid=7678 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209563691.420:26): user pid=7691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209563720.887:27): user pid=7710 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)'
>type=CRED_DISP msg=audit(1209563734.166:28): user pid=5759 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209563734.170:29): user pid=5759 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209563744.355:30): user pid=7767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209563744.358:31): user pid=7767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209563744.363:32): user pid=7767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209563744.364:33): user pid=7767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209563776.942:34): user pid=7829 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209563791.917:35): user pid=7860 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209563791.920:36): user pid=7860 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209563750.500:37): user pid=7886 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209564061.907:38): user pid=8273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209564061.909:39): user pid=8273 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209564061.910:40): login pid=8273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209564061.914:41): user pid=8273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209564061.924:42): user pid=8273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209564061.924:43): user pid=8273 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209564147.549:44): user pid=8376 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209564228.397:45): user pid=7767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209564228.399:46): user pid=7767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209564255.023:47): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3178 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209564255.068:48): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209564255.077:49): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209564268.206:50): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=8717 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209564283.468:51): user pid=8815 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209564283.472:52): user pid=8815 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209564283.475:53): user pid=8815 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209564283.547:54): login pid=8815 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209564283.573:55): user pid=8815 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209564283.932:56): user pid=8815 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209564283.933:57): user pid=8815 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209564432.208:58): auid=500 uid=500 gid=500 ses=4 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=9190 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209564432.243:59): user pid=8815 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209564432.251:60): user pid=8815 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209564465.692:61): user pid=9478 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209564465.696:62): user pid=9478 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209564465.700:63): user pid=9478 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209564465.785:64): login pid=9478 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1209564465.810:65): user pid=9478 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209564466.175:66): user pid=9478 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209564466.176:67): user pid=9478 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209564605.202:68): auid=500 uid=500 gid=500 ses=4 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=9935 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209564612.176:5799): auditd normal halt, sending auid=0 pid=10362 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209564664.287:7444): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1878 res=success
>type=CONFIG_CHANGE msg=audit(1209564664.411:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209564710.224:5): user pid=2427 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209564710.227:6): user pid=2427 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209564710.227:7): login pid=2427 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209564710.326:8): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209564710.421:9): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209564710.439:10): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209564710.440:11): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209566693.395:12): user pid=4437 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="haldaemon" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209566693.396:13): user pid=4437 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="haldaemon" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209566701.670:14): user pid=4544 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209566701.670:15): user pid=4544 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=CRED_DISP msg=audit(1209566844.586:16): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209566844.590:17): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209566844.855:18): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 pid=2509 comm="dbus-daemon" sig=11
>type=DAEMON_END msg=audit(1209566852.448:7445): auditd normal halt, sending auid=0 pid=5201 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209566906.487:5512): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1878 res=success
>type=CONFIG_CHANGE msg=audit(1209566906.609:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209566960.149:5): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209566960.152:6): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209566960.159:7): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209566960.238:8): login pid=2621 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209566960.351:9): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209566961.253:10): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209566961.268:11): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209566992.422:12): user pid=2972 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209566992.423:13): user pid=2972 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209567661.784:14): user pid=3691 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209567661.786:15): user pid=3691 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209567661.786:16): login pid=3691 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209567661.788:17): user pid=3691 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209567661.870:18): user pid=3691 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209567661.870:19): user pid=3691 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209570531.349:20): user pid=6294 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209571261.897:21): user pid=7023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209571261.898:22): user pid=7023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209571261.898:23): login pid=7023 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209571261.902:24): user pid=7023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209571261.909:25): user pid=7023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209571261.909:26): user pid=7023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1209572524.499:27): user pid=8243 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209572865.667:28): user pid=8435 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209572866.056:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0 pid=2190 comm="NetworkManager" sig=6
>type=USER_AUTH msg=audit(1209572882.310:30): user pid=8486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209572946.056:31): user pid=8537 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209572946.059:32): user pid=8537 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209572946.162:33): user pid=8537 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209572946.163:34): user pid=8537 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209574094.413:35): user pid=9044 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209574094.413:36): user pid=9044 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209574094.419:37): user pid=9044 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209574143.403:38): user pid=9044 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209574861.113:39): user pid=10637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209574861.114:40): user pid=10637 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209574861.114:41): login pid=10637 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209574861.116:42): user pid=10637 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209574861.123:43): user pid=10637 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209574861.124:44): user pid=10637 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209575290.822:45): user pid=11178 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209575290.822:46): user pid=11178 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209575290.828:47): user pid=11178 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1209575330.621:48): avc:  denied  { setsched } for  pid=12171 comm="gdb" scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:system_r:NetworkManager_t:s0 tclass=process
>type=SYSCALL msg=audit(1209575330.621:48): arch=40000003 syscall=156 success=no exit=-13 a0=2f8b a1=0 a2=bfa41df4 a3=b802d710 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.631:49): avc:  denied  { read } for  pid=12171 comm="gdb" name="tmp" dev=dm-2 ino=432481 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.631:49): arch=40000003 syscall=5 success=no exit=-13 a0=199e11 a1=0 a2=1b6 a3=0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.632:50): avc:  denied  { read } for  pid=12171 comm="gdb" name="tmp" dev=dm-2 ino=48971 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.632:50): arch=40000003 syscall=5 success=no exit=-13 a0=199e0d a1=0 a2=1b6 a3=0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.632:51): avc:  denied  { read } for  pid=12171 comm="gdb" name="tmp" dev=dm-2 ino=48971 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.632:51): arch=40000003 syscall=5 success=no exit=-13 a0=199e16 a1=0 a2=1b6 a3=0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.744:52): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.744:52): arch=40000003 syscall=33 success=no exit=-13 a0=9236560 a1=2 a2=b53ae4 a3=9236430 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.744:53): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.744:53): arch=40000003 syscall=195 success=no exit=-13 a0=9236c48 a1=bfa4196c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.745:54): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.745:54): arch=40000003 syscall=33 success=no exit=-13 a0=92365f0 a1=2 a2=b53ae4 a3=92364c0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.745:55): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.745:55): arch=40000003 syscall=195 success=no exit=-13 a0=9236cd8 a1=bfa4196c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.745:56): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.745:56): arch=40000003 syscall=33 success=no exit=-13 a0=92365f0 a1=2 a2=b53ae4 a3=92364c0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.745:57): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.745:57): arch=40000003 syscall=195 success=no exit=-13 a0=9236cd8 a1=bfa4196c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.836:58): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.836:58): arch=40000003 syscall=33 success=no exit=-13 a0=92f6ac8 a1=2 a2=b53ae4 a3=92f6978 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.836:59): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.836:59): arch=40000003 syscall=195 success=no exit=-13 a0=92f6ed0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.836:60): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.836:60): arch=40000003 syscall=33 success=no exit=-13 a0=92bdc88 a1=2 a2=b53ae4 a3=92f6a28 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.836:61): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.836:61): arch=40000003 syscall=195 success=no exit=-13 a0=92f6eb0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.840:62): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.840:62): arch=40000003 syscall=33 success=no exit=-13 a0=923cc28 a1=2 a2=b53ae4 a3=9256a40 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.840:63): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.840:63): arch=40000003 syscall=195 success=no exit=-13 a0=92578d8 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.841:64): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.841:64): arch=40000003 syscall=33 success=no exit=-13 a0=9256b60 a1=2 a2=b53ae4 a3=9257790 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.842:65): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.842:65): arch=40000003 syscall=195 success=no exit=-13 a0=92754f0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.844:66): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.844:66): arch=40000003 syscall=33 success=no exit=-13 a0=92578c0 a1=2 a2=b53ae4 a3=92b43c0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.844:67): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.844:67): arch=40000003 syscall=195 success=no exit=-13 a0=9335228 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.844:68): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.844:68): arch=40000003 syscall=33 success=no exit=-13 a0=923cb48 a1=2 a2=b53ae4 a3=9257790 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.844:69): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.844:69): arch=40000003 syscall=195 success=no exit=-13 a0=92b4498 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.845:70): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.845:70): arch=40000003 syscall=33 success=no exit=-13 a0=92753b8 a1=2 a2=b53ae4 a3=9359658 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.845:71): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.845:71): arch=40000003 syscall=195 success=no exit=-13 a0=92cfb90 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.846:72): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.846:72): arch=40000003 syscall=33 success=no exit=-13 a0=92753b8 a1=2 a2=b53ae4 a3=9359658 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.846:73): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.846:73): arch=40000003 syscall=195 success=no exit=-13 a0=92cfbb0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.847:74): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.847:74): arch=40000003 syscall=33 success=no exit=-13 a0=93352a0 a1=2 a2=b53ae4 a3=9335150 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.847:75): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.847:75): arch=40000003 syscall=195 success=no exit=-13 a0=92d9690 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.848:76): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.848:76): arch=40000003 syscall=33 success=no exit=-13 a0=92b44a8 a1=2 a2=b53ae4 a3=9335150 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.848:77): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.848:77): arch=40000003 syscall=195 success=no exit=-13 a0=92bdc18 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.850:78): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.850:78): arch=40000003 syscall=33 success=no exit=-13 a0=92578a0 a1=2 a2=b53ae4 a3=92d9390 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.851:79): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.851:79): arch=40000003 syscall=195 success=no exit=-13 a0=92d9650 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.851:80): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.851:80): arch=40000003 syscall=33 success=no exit=-13 a0=92578a8 a1=2 a2=b53ae4 a3=92d9390 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.851:81): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.851:81): arch=40000003 syscall=195 success=no exit=-13 a0=92d9618 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.853:82): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.853:82): arch=40000003 syscall=33 success=no exit=-13 a0=92b43d0 a1=2 a2=b53ae4 a3=92750b8 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.853:83): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.853:83): arch=40000003 syscall=195 success=no exit=-13 a0=92571d0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.854:84): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.854:84): arch=40000003 syscall=33 success=no exit=-13 a0=92578a0 a1=2 a2=b53ae4 a3=92750b8 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.854:85): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.854:85): arch=40000003 syscall=195 success=no exit=-13 a0=92571b0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.856:86): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.856:86): arch=40000003 syscall=33 success=no exit=-13 a0=92b44c0 a1=2 a2=b53ae4 a3=93fcf00 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.857:87): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.857:87): arch=40000003 syscall=195 success=no exit=-13 a0=92bdbc8 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.857:88): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.857:88): arch=40000003 syscall=33 success=no exit=-13 a0=93fcfc0 a1=2 a2=b53ae4 a3=93fcea8 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.858:89): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.858:89): arch=40000003 syscall=195 success=no exit=-13 a0=93ce7c0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.861:90): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.861:90): arch=40000003 syscall=33 success=no exit=-13 a0=9257890 a1=2 a2=b53ae4 a3=9423a60 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.867:91): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.867:91): arch=40000003 syscall=195 success=no exit=-13 a0=9423e78 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.867:92): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.867:92): arch=40000003 syscall=33 success=no exit=-13 a0=923b7f0 a1=2 a2=b53ae4 a3=9423a60 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.867:93): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.867:93): arch=40000003 syscall=195 success=no exit=-13 a0=92363e8 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.870:94): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.870:94): arch=40000003 syscall=33 success=no exit=-13 a0=9423db8 a1=2 a2=b53ae4 a3=9423ca0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.870:95): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.870:95): arch=40000003 syscall=195 success=no exit=-13 a0=92571d0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.870:96): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.870:96): arch=40000003 syscall=33 success=no exit=-13 a0=9423de0 a1=2 a2=b53ae4 a3=9423ca0 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.871:97): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.871:97): arch=40000003 syscall=195 success=no exit=-13 a0=92571d0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.952:98): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.952:98): arch=40000003 syscall=33 success=no exit=-13 a0=9257248 a1=2 a2=b53ae4 a3=9257130 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.952:99): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.952:99): arch=40000003 syscall=195 success=no exit=-13 a0=9313088 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.952:100): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575330.952:100): arch=40000003 syscall=33 success=no exit=-13 a0=93fd170 a1=2 a2=b53ae4 a3=93a5988 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575330.953:101): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575330.953:101): arch=40000003 syscall=195 success=no exit=-13 a0=93a5dc0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.006:102): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.006:102): arch=40000003 syscall=33 success=no exit=-13 a0=92bdb30 a1=2 a2=b53ae4 a3=9326bd8 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.009:103): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.009:103): arch=40000003 syscall=195 success=no exit=-13 a0=93fd060 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.010:104): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.010:104): arch=40000003 syscall=33 success=no exit=-13 a0=93fd078 a1=2 a2=b53ae4 a3=9326bd8 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.011:105): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.011:105): arch=40000003 syscall=195 success=no exit=-13 a0=92bdb18 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.013:106): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.013:106): arch=40000003 syscall=33 success=no exit=-13 a0=92b4510 a1=2 a2=b53ae4 a3=93b4500 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.018:107): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.018:107): arch=40000003 syscall=195 success=no exit=-13 a0=93b46d0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.021:108): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.021:108): arch=40000003 syscall=33 success=no exit=-13 a0=92b4500 a1=2 a2=b53ae4 a3=93b4500 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.022:109): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.022:109): arch=40000003 syscall=195 success=no exit=-13 a0=92578a0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.024:110): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.024:110): arch=40000003 syscall=33 success=no exit=-13 a0=92571e8 a1=2 a2=b53ae4 a3=93fd060 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.030:111): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.030:111): arch=40000003 syscall=195 success=no exit=-13 a0=92578a8 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.031:112): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.031:112): arch=40000003 syscall=33 success=no exit=-13 a0=9257890 a1=2 a2=b53ae4 a3=93fd060 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.032:113): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.032:113): arch=40000003 syscall=195 success=no exit=-13 a0=9257200 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.034:114): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.034:114): arch=40000003 syscall=33 success=no exit=-13 a0=955f390 a1=2 a2=b53ae4 a3=95ffc08 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.037:115): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.037:115): arch=40000003 syscall=195 success=no exit=-13 a0=9545b18 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.037:116): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.037:116): arch=40000003 syscall=33 success=no exit=-13 a0=955f390 a1=2 a2=b53ae4 a3=95ffc08 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.038:117): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.038:117): arch=40000003 syscall=195 success=no exit=-13 a0=9545b18 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.040:118): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.040:118): arch=40000003 syscall=33 success=no exit=-13 a0=93b46a0 a1=2 a2=b53ae4 a3=95f3f68 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.041:119): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.041:119): arch=40000003 syscall=195 success=no exit=-13 a0=9545b18 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.041:120): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.041:120): arch=40000003 syscall=33 success=no exit=-13 a0=93b46a0 a1=2 a2=b53ae4 a3=95f3f68 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.042:121): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.042:121): arch=40000003 syscall=195 success=no exit=-13 a0=9545b18 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.043:122): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.043:122): arch=40000003 syscall=33 success=no exit=-13 a0=95ffe90 a1=2 a2=b53ae4 a3=9451920 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.045:123): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.045:123): arch=40000003 syscall=195 success=no exit=-13 a0=9451af0 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.045:124): avc:  denied  { write } for  pid=12171 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575331.045:124): arch=40000003 syscall=33 success=no exit=-13 a0=9451920 a1=2 a2=b53ae4 a3=95ffc08 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575331.046:125): avc:  denied  { getattr } for  pid=12171 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575331.046:125): arch=40000003 syscall=195 success=no exit=-13 a0=95ffe28 a1=bfa4188c a2=8c2ff4 a3=64 items=0 ppid=12170 pid=12171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.068:126): avc:  denied  { setsched } for  pid=12441 comm="gdb" scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:system_r:NetworkManager_t:s0 tclass=process
>type=SYSCALL msg=audit(1209575502.068:126): arch=40000003 syscall=156 success=no exit=-13 a0=3099 a1=0 a2=bf8828e4 a3=b806f710 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.151:127): avc:  denied  { read } for  pid=12441 comm="gdb" name="tmp" dev=dm-2 ino=432481 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.151:127): arch=40000003 syscall=5 success=no exit=-13 a0=199e11 a1=0 a2=1b6 a3=0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.159:128): avc:  denied  { read } for  pid=12441 comm="gdb" name="tmp" dev=dm-2 ino=48971 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.159:128): arch=40000003 syscall=5 success=no exit=-13 a0=199e0d a1=0 a2=1b6 a3=0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.160:129): avc:  denied  { read } for  pid=12441 comm="gdb" name="tmp" dev=dm-2 ino=48971 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.160:129): arch=40000003 syscall=5 success=no exit=-13 a0=199e16 a1=0 a2=1b6 a3=0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.236:130): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.236:130): arch=40000003 syscall=33 success=no exit=-13 a0=8f38560 a1=2 a2=b53ae4 a3=8f38430 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.253:131): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.253:131): arch=40000003 syscall=195 success=no exit=-13 a0=8f38c48 a1=bf88245c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.255:132): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.255:132): arch=40000003 syscall=33 success=no exit=-13 a0=8f385f0 a1=2 a2=b53ae4 a3=8f384c0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.256:133): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.256:133): arch=40000003 syscall=195 success=no exit=-13 a0=8f38cd8 a1=bf88245c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.257:134): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.257:134): arch=40000003 syscall=33 success=no exit=-13 a0=8f385f0 a1=2 a2=b53ae4 a3=8f384c0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.258:135): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.258:135): arch=40000003 syscall=195 success=no exit=-13 a0=8f38cd8 a1=bf88245c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.316:136): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.316:136): arch=40000003 syscall=33 success=no exit=-13 a0=8ff8ac8 a1=2 a2=b53ae4 a3=8ff8978 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.317:137): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.317:137): arch=40000003 syscall=195 success=no exit=-13 a0=8ff8ed0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.358:138): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.358:138): arch=40000003 syscall=33 success=no exit=-13 a0=8fbfc88 a1=2 a2=b53ae4 a3=8ff8a28 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.358:139): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.358:139): arch=40000003 syscall=195 success=no exit=-13 a0=8ff8eb0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.376:140): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.376:140): arch=40000003 syscall=33 success=no exit=-13 a0=8f3ec28 a1=2 a2=b53ae4 a3=8f58a40 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.376:141): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.376:141): arch=40000003 syscall=195 success=no exit=-13 a0=8f598d8 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.380:142): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.380:142): arch=40000003 syscall=33 success=no exit=-13 a0=8f58b60 a1=2 a2=b53ae4 a3=8f59790 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.381:143): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.381:143): arch=40000003 syscall=195 success=no exit=-13 a0=8f774f0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.382:144): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.382:144): arch=40000003 syscall=33 success=no exit=-13 a0=8f598c0 a1=2 a2=b53ae4 a3=8fb63c0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.395:145): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.395:145): arch=40000003 syscall=195 success=no exit=-13 a0=9037228 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.395:146): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.395:146): arch=40000003 syscall=33 success=no exit=-13 a0=8f3eb48 a1=2 a2=b53ae4 a3=8f59790 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.395:147): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.395:147): arch=40000003 syscall=195 success=no exit=-13 a0=8fb6498 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.397:148): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.397:148): arch=40000003 syscall=33 success=no exit=-13 a0=8f773b8 a1=2 a2=b53ae4 a3=905b658 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.397:149): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.397:149): arch=40000003 syscall=195 success=no exit=-13 a0=8fd1b90 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.398:150): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.398:150): arch=40000003 syscall=33 success=no exit=-13 a0=8f773b8 a1=2 a2=b53ae4 a3=905b658 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.398:151): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.398:151): arch=40000003 syscall=195 success=no exit=-13 a0=8fd1bb0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.399:152): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.399:152): arch=40000003 syscall=33 success=no exit=-13 a0=90372a0 a1=2 a2=b53ae4 a3=9037150 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.401:153): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.401:153): arch=40000003 syscall=195 success=no exit=-13 a0=8fdb690 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.401:154): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.401:154): arch=40000003 syscall=33 success=no exit=-13 a0=8fb64a8 a1=2 a2=b53ae4 a3=9037150 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.401:155): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.401:155): arch=40000003 syscall=195 success=no exit=-13 a0=8fbfc18 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.404:156): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.404:156): arch=40000003 syscall=33 success=no exit=-13 a0=8f598a0 a1=2 a2=b53ae4 a3=8fdb390 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.415:157): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.415:157): arch=40000003 syscall=195 success=no exit=-13 a0=8fdb650 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.415:158): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.415:158): arch=40000003 syscall=33 success=no exit=-13 a0=8f598a8 a1=2 a2=b53ae4 a3=8fdb390 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.415:159): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.415:159): arch=40000003 syscall=195 success=no exit=-13 a0=8fdb618 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.417:160): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.417:160): arch=40000003 syscall=33 success=no exit=-13 a0=8fb63d0 a1=2 a2=b53ae4 a3=8f770b8 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.429:161): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.429:161): arch=40000003 syscall=195 success=no exit=-13 a0=8f591d0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.430:162): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.430:162): arch=40000003 syscall=33 success=no exit=-13 a0=8f598a0 a1=2 a2=b53ae4 a3=8f770b8 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.430:163): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.430:163): arch=40000003 syscall=195 success=no exit=-13 a0=8f591b0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.432:164): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.432:164): arch=40000003 syscall=33 success=no exit=-13 a0=8fb64c0 a1=2 a2=b53ae4 a3=90fef00 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.455:165): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.455:165): arch=40000003 syscall=195 success=no exit=-13 a0=8fbfbc8 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.455:166): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.455:166): arch=40000003 syscall=33 success=no exit=-13 a0=90fefc0 a1=2 a2=b53ae4 a3=90feea8 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.459:167): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.459:167): arch=40000003 syscall=195 success=no exit=-13 a0=90d07c0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.476:168): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.476:168): arch=40000003 syscall=33 success=no exit=-13 a0=8f59890 a1=2 a2=b53ae4 a3=9125a60 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.476:169): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.476:169): arch=40000003 syscall=195 success=no exit=-13 a0=9125e78 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.476:170): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.476:170): arch=40000003 syscall=33 success=no exit=-13 a0=8f3d7f0 a1=2 a2=b53ae4 a3=9125a60 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.481:171): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.481:171): arch=40000003 syscall=195 success=no exit=-13 a0=8f383e8 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.483:172): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.483:172): arch=40000003 syscall=33 success=no exit=-13 a0=9125db8 a1=2 a2=b53ae4 a3=9125ca0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.496:173): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.496:173): arch=40000003 syscall=195 success=no exit=-13 a0=8f591d0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.496:174): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.496:174): arch=40000003 syscall=33 success=no exit=-13 a0=9125de0 a1=2 a2=b53ae4 a3=9125ca0 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.496:175): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.496:175): arch=40000003 syscall=195 success=no exit=-13 a0=8f591d0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.597:176): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.597:176): arch=40000003 syscall=33 success=no exit=-13 a0=8f59248 a1=2 a2=b53ae4 a3=8f59130 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.615:177): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.615:177): arch=40000003 syscall=195 success=no exit=-13 a0=9015088 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.615:178): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.615:178): arch=40000003 syscall=33 success=no exit=-13 a0=90ff170 a1=2 a2=b53ae4 a3=90a7988 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.616:179): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.616:179): arch=40000003 syscall=195 success=no exit=-13 a0=90a7dc0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.618:180): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.618:180): arch=40000003 syscall=33 success=no exit=-13 a0=8fbfb30 a1=2 a2=b53ae4 a3=9028bd8 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.635:181): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.635:181): arch=40000003 syscall=195 success=no exit=-13 a0=90ff060 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.635:182): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.635:182): arch=40000003 syscall=33 success=no exit=-13 a0=90ff078 a1=2 a2=b53ae4 a3=9028bd8 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.635:183): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.635:183): arch=40000003 syscall=195 success=no exit=-13 a0=8fbfb18 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.637:184): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.637:184): arch=40000003 syscall=33 success=no exit=-13 a0=8fb6510 a1=2 a2=b53ae4 a3=90b6500 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.637:185): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.637:185): arch=40000003 syscall=195 success=no exit=-13 a0=90b66d0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.638:186): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.638:186): arch=40000003 syscall=33 success=no exit=-13 a0=8fb6500 a1=2 a2=b53ae4 a3=90b6500 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.638:187): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.638:187): arch=40000003 syscall=195 success=no exit=-13 a0=8f598a0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.639:188): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.639:188): arch=40000003 syscall=33 success=no exit=-13 a0=8f591e8 a1=2 a2=b53ae4 a3=90ff060 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.640:189): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.640:189): arch=40000003 syscall=195 success=no exit=-13 a0=8f598a8 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.640:190): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.640:190): arch=40000003 syscall=33 success=no exit=-13 a0=8f59890 a1=2 a2=b53ae4 a3=90ff060 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.652:191): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.652:191): arch=40000003 syscall=195 success=no exit=-13 a0=8f59200 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.654:192): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.654:192): arch=40000003 syscall=33 success=no exit=-13 a0=9261390 a1=2 a2=b53ae4 a3=9301c08 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.671:193): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.671:193): arch=40000003 syscall=195 success=no exit=-13 a0=9247b18 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.672:194): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.672:194): arch=40000003 syscall=33 success=no exit=-13 a0=9261390 a1=2 a2=b53ae4 a3=9301c08 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.673:195): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.673:195): arch=40000003 syscall=195 success=no exit=-13 a0=9247b18 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.675:196): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.675:196): arch=40000003 syscall=33 success=no exit=-13 a0=90b66a0 a1=2 a2=b53ae4 a3=92f5f68 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.675:197): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.675:197): arch=40000003 syscall=195 success=no exit=-13 a0=9247b18 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.675:198): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.675:198): arch=40000003 syscall=33 success=no exit=-13 a0=90b66a0 a1=2 a2=b53ae4 a3=92f5f68 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.675:199): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.675:199): arch=40000003 syscall=195 success=no exit=-13 a0=9247b18 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.676:200): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.676:200): arch=40000003 syscall=33 success=no exit=-13 a0=9301e90 a1=2 a2=b53ae4 a3=9153920 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.680:201): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.680:201): arch=40000003 syscall=195 success=no exit=-13 a0=9153af0 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.680:202): avc:  denied  { write } for  pid=12441 comm="gdb" name="rpm" dev=dm-2 ino=48963 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209575502.680:202): arch=40000003 syscall=33 success=no exit=-13 a0=9153920 a1=2 a2=b53ae4 a3=9301c08 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1209575502.680:203): avc:  denied  { getattr } for  pid=12441 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-2 ino=48967 scontext=unconfined_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1209575502.680:203): arch=40000003 syscall=195 success=no exit=-13 a0=9301e28 a1=bf88237c a2=8c2ff4 a3=64 items=0 ppid=12440 pid=12441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="gdb" exe="/usr/bin/gdb" subj=unconfined_u:system_r:NetworkManager_t:s0 key=(null)
>type=USER_END msg=audit(1209575537.767:204): user pid=11178 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209575582.811:205): user pid=12497 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209575582.812:206): user pid=12497 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209575582.823:207): user pid=12497 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209575624.731:208): user pid=12497 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209575634.378:209): user pid=8537 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209575634.380:210): user pid=8537 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209575650.827:211): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=2929 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209575657.722:5513): auditd normal halt, sending auid=0 pid=13655 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209575710.254:8520): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1879 res=success
>type=CONFIG_CHANGE msg=audit(1209575710.378:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209577680.389:5): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209577680.393:6): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209577680.483:7): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209577680.579:8): login pid=2621 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209577680.621:9): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209577681.517:10): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209577681.527:11): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209577730.783:12): user pid=4313 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209577730.785:13): user pid=4313 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209578461.675:14): user pid=5107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209578461.677:15): user pid=5107 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209578461.677:16): login pid=5107 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209578461.679:17): user pid=5107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209578461.729:18): user pid=5107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209578461.730:19): user pid=5107 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209580374.056:20): user pid=6837 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209582061.755:21): user pid=8382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209582061.756:22): user pid=8382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209582061.757:23): login pid=8382 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209582061.759:24): user pid=8382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209582061.764:25): user pid=8382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209582061.765:26): user pid=8382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209585661.789:27): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209585661.791:28): user pid=11630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209585661.792:29): login pid=11630 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209585661.794:30): user pid=11630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209585661.798:31): user pid=11630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209585661.798:32): user pid=11630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209589261.820:33): user pid=14869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209589261.822:34): user pid=14869 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209589261.823:35): login pid=14869 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209589261.825:36): user pid=14869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209589261.828:37): user pid=14869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209589261.829:38): user pid=14869 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209590474.334:39): user pid=15964 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209590773.180:40): user pid=16237 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209590773.183:41): user pid=16237 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209590773.283:42): user pid=16237 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209590773.284:43): user pid=16237 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209590966.505:44): user pid=16237 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209590966.509:45): user pid=16237 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209591097.404:46): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4255 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209591097.437:47): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209591097.446:48): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209591127.376:49): user pid=2427 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209591127.379:50): user pid=2427 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209591127.380:51): login pid=2427 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1209591127.391:52): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209591127.421:53): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209591127.422:54): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209591127.423:55): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209591159.538:56): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=16806 comm="metacity" sig=6
>type=USYS_CONFIG msg=audit(1209591283.502:57): user pid=18133 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209591609.883:58): user pid=18218 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209591842.499:59): user pid=19012 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209591964.903:60): user pid=19084 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209592034.543:61): user pid=17563 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209592034.547:62): user pid=17563 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209592034.551:63): user pid=17563 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209592034.638:64): login pid=17563 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1209592034.666:65): user pid=17563 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209592036.386:66): user pid=17563 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209592036.388:67): user pid=17563 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209592367.213:68): user pid=20260 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209592367.213:69): user pid=20260 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209592391.930:70): user pid=20283 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209592391.933:71): user pid=20283 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209592392.402:72): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209592392.405:73): user pid=2427 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209592392.504:74): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=19916 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209592405.011:8521): auditd normal halt, sending auid=0 pid=20604 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209592465.232:9721): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1878 res=success
>type=CONFIG_CHANGE msg=audit(1209592465.356:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209592499.546:5): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209592499.550:6): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209592499.585:7): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209592499.681:8): login pid=2619 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209592499.724:9): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209592500.592:10): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209592500.607:11): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209592628.122:12): user pid=3097 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209592628.122:13): user pid=3097 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209592861.784:14): user pid=3327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209592861.785:15): user pid=3327 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209592861.786:16): login pid=3327 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209592861.791:17): user pid=3327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209592861.835:18): user pid=3327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209592861.835:19): user pid=3327 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1209594926.500:20): user pid=5369 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209618140.755:21): user pid=5447 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209618149.923:22): user pid=5628 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1209621136.034:23): avc:  denied  { setattr } for  pid=11576 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209621136.034:23): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9a8a44 a2=0 a3=98f0530 items=0 ppid=11574 pid=11576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209621136.047:24): avc:  denied  { setattr } for  pid=11576 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209621136.047:24): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9a8a44 a2=0 a3=98f0530 items=0 ppid=11574 pid=11576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209621136.051:25): avc:  denied  { setattr } for  pid=11576 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209621136.051:25): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9a8ca4 a2=0 a3=98ee4f0 items=0 ppid=11574 pid=11576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1209621661.593:26): user pid=12089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209621661.596:27): user pid=12089 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209621661.597:28): login pid=12089 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209621661.621:29): user pid=12089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209621661.642:30): user pid=12089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209621661.644:31): user pid=12089 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209624134.005:32): user pid=14313 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209625261.669:33): user pid=15448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209625261.669:34): user pid=15448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209625261.669:35): login pid=15448 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209625261.672:36): user pid=15448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209625261.678:37): user pid=15448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209625261.679:38): user pid=15448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209628607.124:39): user pid=18497 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209628861.915:40): user pid=18734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209628861.918:41): user pid=18734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209628861.919:42): login pid=18734 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209628861.922:43): user pid=18734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209628861.924:44): user pid=18734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209628861.925:45): user pid=18734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209632461.949:46): user pid=21993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209632461.951:47): user pid=21993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209632461.952:48): login pid=21993 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209632461.953:49): user pid=21993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209632461.957:50): user pid=21993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209632461.958:51): user pid=21993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209636061.982:52): user pid=25224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209636061.983:53): user pid=25224 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209636061.983:54): login pid=25224 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209636061.985:55): user pid=25224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209636061.989:56): user pid=25224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209636061.989:57): user pid=25224 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209639661.015:58): user pid=28455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209639661.015:59): user pid=28455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209639661.016:60): login pid=28455 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209639661.020:61): user pid=28455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209639661.024:62): user pid=28455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209639661.024:63): user pid=28455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209643261.043:64): user pid=31688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209643261.044:65): user pid=31688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209643261.045:66): login pid=31688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209643261.046:67): user pid=31688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209643261.049:68): user pid=31688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209643261.050:69): user pid=31688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209645711.875:70): user pid=1447 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209645763.524:71): user pid=1500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209645763.526:72): user pid=1500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209645763.699:73): user pid=1500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209645763.700:74): user pid=1500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209646090.895:75): user pid=1914 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209646090.897:76): user pid=1914 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209646506.324:77): user pid=2470 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209646541.486:78): user pid=1500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209646541.496:79): user pid=1500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209646574.346:80): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=2917 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209646576.006:9722): auditd normal halt, sending auid=0 pid=2779 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209646630.634:4323): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1879 res=success
>type=CONFIG_CHANGE msg=audit(1209646630.757:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209646671.829:5): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209646671.832:6): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209646671.896:7): user pid=2621 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209646671.980:8): login pid=2621 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209646672.023:9): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209646672.858:10): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209646672.878:11): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209646861.633:12): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209646861.636:13): user pid=3190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209646861.637:14): login pid=3190 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209646861.640:15): user pid=3190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209646861.706:16): user pid=3190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209646861.707:17): user pid=3190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209647421.614:18): user pid=3703 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209647421.614:19): user pid=3703 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209648989.064:20): user pid=5477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209650104.651:21): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=2930 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209650104.685:22): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209650104.694:23): user pid=2621 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209650122.636:24): user pid=2428 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209650122.639:25): user pid=2428 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209650122.639:26): login pid=2428 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209650122.651:27): user pid=2428 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209650122.682:28): user pid=2428 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209650122.683:29): user pid=2428 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209650122.684:30): user pid=2428 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209650175.358:31): user pid=7247 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209650175.359:32): user pid=7247 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209650175.371:33): user pid=7247 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209650175.607:34): user pid=7247 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209650191.235:35): user pid=7262 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209650191.237:36): user pid=7262 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209650191.238:37): user pid=7262 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209650193.123:38): user pid=7262 uid=0 auid=0 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209650311.957:39): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=6891 comm="metacity" sig=6
>type=CRED_DISP msg=audit(1209650326.677:40): user pid=2428 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209650326.680:41): user pid=2428 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=DAEMON_END msg=audit(1209650333.653:4324): auditd normal halt, sending auid=0 pid=8367 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209650385.298:9132): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1879 res=success
>type=CONFIG_CHANGE msg=audit(1209650385.408:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209650425.901:5): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209650425.904:6): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209650426.029:7): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209650426.128:8): login pid=2619 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209650426.167:9): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209650427.013:10): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209650427.033:11): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209650461.216:12): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209650461.218:13): user pid=2970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209650461.219:14): login pid=2970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209650461.222:15): user pid=2970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209650461.266:16): user pid=2970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209650461.267:17): user pid=2970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209650764.584:18): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209650764.587:19): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209650764.697:20): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209650764.698:21): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1209650879.262:22): user pid=3489 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209650879.264:23): user pid=3489 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209650999.743:24): user pid=3691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209650999.743:25): user pid=3691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209650999.751:26): user pid=3691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209651068.413:27): user pid=3691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209651088.523:28): user pid=4717 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209651088.523:29): user pid=4717 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209651088.529:30): user pid=4717 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209651088.695:31): user pid=4717 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1209651295.442:32): dev=vnet0 prom=256 old_prom=0 auid=500 uid=0 gid=0 ses=1
>type=SYSCALL msg=audit(1209651295.442:32): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bfa64868 a3=6 items=0 ppid=1 pid=4701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1209651295.447:33): avc:  denied  { getattr } for  pid=5035 comm="qemu" path="/home/mihai/xp.img" dev=dm-0 ino=2029062 scontext=unconfined_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209651295.447:33): arch=40000003 syscall=195 success=no exit=-13 a0=bf88c960 a1=bf889fa0 a2=2e3ff4 a3=bf88c960 items=0 ppid=4701 pid=5035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qemu" exe="/usr/bin/qemu" subj=unconfined_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1209651295.447:34): avc:  denied  { read } for  pid=5035 comm="qemu" name="xp.img" dev=dm-0 ino=2029062 scontext=unconfined_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209651295.447:34): arch=40000003 syscall=5 success=no exit=-13 a0=bf88c960 a1=8000 a2=0 a3=8000 items=0 ppid=4701 pid=5035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qemu" exe="/usr/bin/qemu" subj=unconfined_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1209651295.485:35): dev=vnet0 prom=0 old_prom=256 auid=500 uid=0 gid=0 ses=1
>type=SYSCALL msg=audit(1209651295.485:35): arch=40000003 syscall=6 success=yes exit=0 a0=d a1=91aa2b0 a2=1b65b0 a3=4 items=0 ppid=1 pid=4701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1209651330.765:36): dev=vnet0 prom=256 old_prom=0 auid=500 uid=0 gid=0 ses=1
>type=SYSCALL msg=audit(1209651330.765:36): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bfa64868 a3=6 items=0 ppid=1 pid=4701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1209651330.770:37): avc:  denied  { getattr } for  pid=5103 comm="qemu" path="/home/mihai/xp.img" dev=dm-0 ino=2029062 scontext=unconfined_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209651330.770:37): arch=40000003 syscall=195 success=no exit=-13 a0=bfdb4e80 a1=bfdb24c0 a2=2e3ff4 a3=bfdb4e80 items=0 ppid=4701 pid=5103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qemu" exe="/usr/bin/qemu" subj=unconfined_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1209651330.775:38): avc:  denied  { read } for  pid=5103 comm="qemu" name="xp.img" dev=dm-0 ino=2029062 scontext=unconfined_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209651330.775:38): arch=40000003 syscall=5 success=no exit=-13 a0=bfdb4e80 a1=8000 a2=0 a3=8000 items=0 ppid=4701 pid=5103 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qemu" exe="/usr/bin/qemu" subj=unconfined_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1209651330.775:39): dev=vnet0 prom=0 old_prom=256 auid=500 uid=0 gid=0 ses=1
>type=SYSCALL msg=audit(1209651330.775:39): arch=40000003 syscall=6 success=yes exit=0 a0=d a1=91edad0 a2=1b65b0 a3=4 items=0 ppid=1 pid=4701 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0 key=(null)
>type=USER_AUTH msg=audit(1209653754.959:40): user pid=7776 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209654061.294:41): user pid=8135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209654061.296:42): user pid=8135 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209654061.296:43): login pid=8135 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209654061.298:44): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209654061.305:45): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209654061.306:46): user pid=8135 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209655102.235:47): user pid=9295 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209657661.331:48): user pid=12175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209657661.332:49): user pid=12175 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209657661.332:50): login pid=12175 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209657661.336:51): user pid=12175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209657661.341:52): user pid=12175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209657661.342:53): user pid=12175 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209657687.405:54): user pid=12205 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209657687.407:55): user pid=12205 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209657687.416:56): user pid=12205 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209657687.417:57): user pid=12205 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1209658325.976:58): user pid=12987 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209660578.415:59): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209660578.419:60): user pid=3333 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1209660580.689:61): user pid=12205 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209660580.691:62): user pid=12205 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1209660585.765:63): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=2930 comm="tomboy" sig=11
>type=DAEMON_END msg=audit(1209660592.879:9133): auditd normal halt, sending auid=0 pid=15862 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209660646.387:1634): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1885 res=success
>type=CONFIG_CHANGE msg=audit(1209660646.497:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209660686.947:5): user pid=2729 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209660686.951:6): user pid=2729 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209660686.970:7): user pid=2729 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209660687.060:8): login pid=2729 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209660687.100:9): user pid=2729 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209660687.980:10): user pid=2729 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209660687.999:11): user pid=2729 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209660791.485:12): user pid=3224 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209660791.487:13): user pid=3224 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209661261.687:14): user pid=3743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209661261.724:15): user pid=3743 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209661261.725:16): login pid=3743 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209661261.780:17): user pid=3743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209661261.914:18): user pid=3743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209661261.915:19): user pid=3743 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209664809.050:20): user pid=6971 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209664861.357:21): user pid=7050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209664861.412:22): user pid=7050 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209664861.412:23): login pid=7050 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209664861.755:24): user pid=7050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209664862.078:25): user pid=7050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209664862.078:26): user pid=7050 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209666969.240:27): user pid=8943 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209667611.916:28): user pid=9556 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209668461.419:29): user pid=10417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209668461.422:30): user pid=10417 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209668461.423:31): login pid=10417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209668461.480:32): user pid=10417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209668461.525:33): user pid=10417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209668461.526:34): user pid=10417 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209672061.548:35): user pid=13652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209672061.550:36): user pid=13652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209672061.550:37): login pid=13652 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209672061.554:38): user pid=13652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209672061.564:39): user pid=13652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209672061.565:40): user pid=13652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209675661.587:41): user pid=16882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209675661.670:42): user pid=16882 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209675661.671:43): login pid=16882 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209675661.673:44): user pid=16882 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209675661.682:45): user pid=16882 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209675661.683:46): user pid=16882 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209679261.701:47): user pid=20113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209679261.702:48): user pid=20113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209679261.703:49): login pid=20113 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209679261.704:50): user pid=20113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209679261.708:51): user pid=20113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209679261.708:52): user pid=20113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209682861.730:53): user pid=23344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209682861.732:54): user pid=23344 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209682861.733:55): login pid=23344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209682861.735:56): user pid=23344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209682861.744:57): user pid=23344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209682861.745:58): user pid=23344 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209686461.767:59): user pid=26573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209686461.768:60): user pid=26573 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209686461.768:61): login pid=26573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209686461.769:62): user pid=26573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209686461.773:63): user pid=26573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209686461.774:64): user pid=26573 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209690061.796:65): user pid=29803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209690061.798:66): user pid=29803 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209690061.799:67): login pid=29803 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209690061.801:68): user pid=29803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209690061.806:69): user pid=29803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209690061.807:70): user pid=29803 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209690121.815:71): user pid=29860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209690121.816:72): user pid=29860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209690121.816:73): login pid=29860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1209690121.820:74): user pid=29860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209691847.278:75): avc:  denied  { setattr } for  pid=5714 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209691847.278:75): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9fa334 a2=0 a3=8a18530 items=0 ppid=5712 pid=5714 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209691847.292:76): avc:  denied  { setattr } for  pid=5714 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209691847.292:76): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9fa334 a2=0 a3=8a18530 items=0 ppid=5712 pid=5714 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1209691847.295:77): avc:  denied  { setattr } for  pid=5714 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209691847.295:77): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bf9fa594 a2=0 a3=8a164f0 items=0 ppid=5712 pid=5714 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1209691848.931:78): user pid=29860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209691848.932:79): user pid=29860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209693662.104:80): user pid=7390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209693662.106:81): user pid=7390 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209693662.106:82): login pid=7390 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1209693662.146:83): user pid=7390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209693662.179:84): user pid=7390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209693662.179:85): user pid=7390 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209697261.199:86): user pid=10628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209697261.200:87): user pid=10628 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209697261.200:88): login pid=10628 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1209697261.201:89): user pid=10628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209697261.205:90): user pid=10628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209697261.206:91): user pid=10628 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209700861.227:92): user pid=13857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209700861.229:93): user pid=13857 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209700861.229:94): login pid=13857 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1209700861.231:95): user pid=13857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209700861.234:96): user pid=13857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209700861.235:97): user pid=13857 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209704461.257:98): user pid=17087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209704461.258:99): user pid=17087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209704461.258:100): login pid=17087 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_START msg=audit(1209704461.260:101): user pid=17087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209704461.264:102): user pid=17087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209704461.264:103): user pid=17087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209708061.286:104): user pid=20317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209708061.286:105): user pid=20317 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209708061.287:106): login pid=20317 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_START msg=audit(1209708061.288:107): user pid=20317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209708061.291:108): user pid=20317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209708061.292:109): user pid=20317 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209709323.704:110): user pid=21450 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209709735.573:111): user pid=21861 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209709735.575:112): user pid=21861 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1209709735.639:113): user pid=21861 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1209709735.640:114): user pid=21861 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1209711661.318:115): user pid=23645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209711661.319:116): user pid=23645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209711661.319:117): login pid=23645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_START msg=audit(1209711661.323:118): user pid=23645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209711661.328:119): user pid=23645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209711661.329:120): user pid=23645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209712461.096:121): user pid=24370 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209715261.350:122): user pid=26945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209715261.353:123): user pid=26945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209715261.354:124): login pid=26945 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_START msg=audit(1209715261.355:125): user pid=26945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209715261.362:126): user pid=26945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209715261.363:127): user pid=26945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209718861.388:128): user pid=30211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209718861.389:129): user pid=30211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209718861.390:130): login pid=30211 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_START msg=audit(1209718861.391:131): user pid=30211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209718861.395:132): user pid=30211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209718861.396:133): user pid=30211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209719188.396:134): user pid=30506 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209720117.006:135): user pid=21861 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1209720117.010:136): user pid=21861 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1209720168.034:137): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3037 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209720168.068:138): user pid=2729 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209720168.339:139): user pid=2729 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209720262.759:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2272 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209720265.385:1635): auditd normal halt, sending auid=0 pid=32092 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209720318.804:5520): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1883 res=success
>type=CONFIG_CHANGE msg=audit(1209720318.922:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209720719.738:5): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1209720719.741:6): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1209720719.793:7): user pid=3119 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=LOGIN msg=audit(1209720719.825:8): login pid=3119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209720719.825:9): user pid=3119 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1209720719.886:10): user pid=3127 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=/dev/pts/1 res=success)'
>type=CRED_REFR msg=audit(1209720719.889:11): user pid=3127 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=ANOM_ABEND msg=audit(1209720762.398:12): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2766 comm="metacity" sig=6
>type=CRED_DISP msg=audit(1209720810.338:13): user pid=3119 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_END msg=audit(1209720810.341:14): user pid=3119 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=ANOM_ABEND msg=audit(1209720813.736:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2270 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209720815.854:5521): auditd normal halt, sending auid=0 pid=4246 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209720893.794:4037): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1887 res=success
>type=CONFIG_CHANGE msg=audit(1209720893.915:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209720935.603:5): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209720935.607:6): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209720935.641:7): user pid=2732 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209720935.739:8): login pid=2732 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209720935.823:9): user pid=2732 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209720936.670:10): user pid=2732 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209720936.679:11): user pid=2732 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209720946.981:12): user pid=2973 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209720946.982:13): user pid=2973 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209722061.959:14): user pid=4493 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_ACCT msg=audit(1209722061.962:15): user pid=4493 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1209722061.977:16): user pid=4493 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=LOGIN msg=audit(1209722061.979:17): login pid=4493 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209722061.979:18): user pid=4493 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1209722062.081:19): user pid=4503 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=/dev/pts/3 res=success)'
>type=CRED_REFR msg=audit(1209722062.100:20): user pid=4503 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=CRED_DISP msg=audit(1209722129.103:21): user pid=2732 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209722129.137:22): user pid=2732 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209722129.538:23): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3052 comm="tomboy" sig=11
>type=USER_AUTH msg=audit(1209722164.043:24): user pid=2536 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209722164.046:25): user pid=2536 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209722164.046:26): login pid=2536 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209722164.059:27): user pid=2536 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209722164.091:28): user pid=2536 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209722164.092:29): user pid=2536 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209722164.093:30): user pid=2536 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209722209.745:31): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209722209.748:32): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209722209.753:33): user pid=4706 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209722209.827:34): login pid=4706 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209722209.862:35): user pid=4706 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209722210.187:36): user pid=4706 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209722210.188:37): user pid=4706 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209722214.321:38): user pid=5637 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209722214.322:39): user pid=5637 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209722288.924:40): auid=500 uid=500 gid=500 ses=4 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=5708 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209722288.961:41): user pid=4706 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209722289.003:42): user pid=4706 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209722329.160:43): user pid=6074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209722329.164:44): user pid=6074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209722329.168:45): user pid=6074 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209722329.304:46): login pid=6074 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1209722329.328:47): user pid=6074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209722329.779:48): user pid=6074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209722329.781:49): user pid=6074 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209722461.199:50): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209722461.201:51): user pid=7253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209722461.202:52): login pid=7253 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209722461.203:53): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209722461.249:54): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209722461.250:55): user pid=7253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1209722756.553:56): auid=500 uid=500 gid=500 ses=5 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=7042 comm="tomboy" sig=11
>type=USER_AUTH msg=audit(1209722771.059:57): user pid=7626 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209722771.063:58): user pid=7626 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209722771.067:59): user pid=7626 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209722771.162:60): login pid=7626 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1209722771.180:61): user pid=7626 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209722771.215:62): user pid=7626 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209722771.216:63): user pid=7626 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty9 res=success)'
>type=CRED_DISP msg=audit(1209722795.136:64): user pid=7626 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209722795.140:65): user pid=7626 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209722796.164:66): auid=500 uid=500 gid=500 ses=7 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=8202 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209722803.531:67): user pid=2536 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209722803.534:68): user pid=2536 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209722805.710:69): user pid=4493 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=USER_END msg=audit(1209722805.713:70): user pid=4493 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" (hostname=10.0.100.100, addr=10.0.100.100, terminal=ssh res=success)'
>type=ANOM_ABEND msg=audit(1209722809.189:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2274 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209722811.398:4038): auditd normal halt, sending auid=0 pid=9203 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209722863.056:7855): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1883 res=success
>type=CONFIG_CHANGE msg=audit(1209722863.177:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209722936.473:5): user pid=2725 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209722936.477:6): user pid=2725 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209722936.577:7): user pid=2725 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209722936.672:8): login pid=2725 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209722936.749:9): user pid=2725 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209722937.694:10): user pid=2725 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209722937.714:11): user pid=2725 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209723702.005:12): user pid=3770 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209724035.968:13): user pid=4114 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209724035.969:14): user pid=4114 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209724036.019:15): user pid=4114 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209724088.374:16): user pid=4114 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209724092.648:17): user pid=5077 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209724092.649:18): user pid=5077 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209724092.663:19): user pid=5077 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209724142.456:20): user pid=5077 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209724828.621:21): user pid=5961 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209724828.621:22): user pid=5961 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209726061.075:23): user pid=7379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209726061.076:24): user pid=7379 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209726061.077:25): login pid=7379 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209726061.079:26): user pid=7379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209726061.115:27): user pid=7379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209726061.116:28): user pid=7379 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209726965.616:29): user pid=8386 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209729661.145:30): user pid=14663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209729661.146:31): user pid=14663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209729661.147:32): login pid=14663 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209729661.149:33): user pid=14663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209729661.155:34): user pid=14663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209729661.155:35): user pid=14663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209729878.887:36): user pid=14915 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209730181.982:37): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3064 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209730182.013:38): user pid=2725 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209730182.050:39): user pid=2725 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209730192.519:40): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=15519 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209730206.646:41): user pid=15631 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209730206.649:42): user pid=15631 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209730206.654:43): user pid=15631 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209730206.724:44): login pid=15631 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209730206.758:45): user pid=15631 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209730207.108:46): user pid=15631 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209730207.110:47): user pid=15631 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=ANOM_ABEND msg=audit(1209730661.984:48): auid=500 uid=500 gid=500 ses=4 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=15986 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209730667.071:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2270 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209730669.265:7856): auditd normal halt, sending auid=0 pid=16734 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209737199.873:8809): auditd start, ver=1.7.2 format=raw kernel=2.6.25-8.fc9.i686 auid=4294967295 pid=1871 res=success
>type=CONFIG_CHANGE msg=audit(1209737199.994:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209737271.887:5): user pid=2728 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209737271.891:6): user pid=2728 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209737271.924:7): user pid=2728 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209737272.008:8): login pid=2728 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209737272.066:9): user pid=2728 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209737272.924:10): user pid=2728 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209737272.932:11): user pid=2728 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209737383.970:12): user pid=3171 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209737383.974:13): user pid=3171 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209737384.007:14): user pid=3171 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209737384.008:15): user pid=3171 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1209737597.474:16): user pid=3460 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209737597.475:17): user pid=3460 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209737597.484:18): user pid=3460 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209737682.016:19): user pid=4490 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209737682.017:20): user pid=4490 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209737999.581:21): user pid=3460 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1209738646.299:22): user pid=5398 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1209738646.299:23): user pid=5398 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1209739020.686:24): user pid=9768 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209739027.987:25): user pid=3171 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209739027.993:26): user pid=3171 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1209739441.225:27): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3049 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209739446.086:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2258 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209739448.319:8810): auditd normal halt, sending auid=0 pid=10495 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209739500.289:133): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1862 res=success
>type=CONFIG_CHANGE msg=audit(1209739500.410:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209739539.183:5): user pid=2715 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209739539.188:6): user pid=2715 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209739539.222:7): user pid=2715 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209739539.311:8): login pid=2715 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209739539.363:9): user pid=2715 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209739540.254:10): user pid=2715 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209739540.274:11): user pid=2715 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209739644.439:12): user pid=3186 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209739644.440:13): user pid=3186 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209739963.696:14): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209739963.700:15): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1209739963.810:16): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1209739963.811:17): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1209740245.614:18): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1209740245.616:19): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_ABEND msg=audit(1209740270.377:20): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3022 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209740270.426:21): user pid=2715 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209740270.435:22): user pid=2715 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209740363.955:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2249 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209740366.074:134): auditd normal halt, sending auid=0 pid=4578 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209740418.320:6478): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1858 res=success
>type=CONFIG_CHANGE msg=audit(1209740418.442:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209740459.075:5): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209740459.080:6): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209740459.114:7): user pid=2698 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209740459.203:8): login pid=2698 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209740459.244:9): user pid=2698 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209740460.057:10): user pid=2698 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209740460.067:11): user pid=2698 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1209740461.987:12): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209740461.989:13): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209740461.990:14): login pid=2871 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209740461.996:15): user pid=2871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209740462.054:16): user pid=2871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209740462.056:17): user pid=2871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209741607.671:18): user pid=3998 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209741607.674:19): user pid=3998 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1209741607.706:20): user pid=3998 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1209741607.707:21): user pid=3998 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_AUTH msg=audit(1209742774.658:22): user pid=4925 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209742774.660:23): user pid=4925 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209742790.175:24): user pid=3998 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1209742790.177:25): user pid=3998 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209744061.081:26): user pid=6216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209744061.083:27): user pid=6216 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209744061.083:28): login pid=6216 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209744061.085:29): user pid=6216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209744061.092:30): user pid=6216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209744061.093:31): user pid=6216 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1209745015.860:32): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3008 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209745020.734:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2245 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209745022.873:6479): auditd normal halt, sending auid=0 pid=7426 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209837531.400:3333): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1861 res=success
>type=CONFIG_CHANGE msg=audit(1209837531.545:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209837639.346:5): user pid=2718 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209837639.351:6): user pid=2718 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209837639.380:7): user pid=2718 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209837639.469:8): login pid=2718 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209837639.520:9): user pid=2718 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209837640.301:10): user pid=2718 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209837640.321:11): user pid=2718 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209837648.101:12): user pid=3009 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209837648.101:13): user pid=3009 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209837661.254:14): user pid=3098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209837661.257:15): user pid=3098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209837661.258:16): login pid=3098 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209837661.266:17): user pid=3098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209837661.372:18): user pid=3098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209837661.372:19): user pid=3098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209837719.541:20): user pid=3215 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209837719.544:21): user pid=3215 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209837719.680:22): user pid=3215 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209837719.680:23): user pid=3215 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1209838155.564:24): user pid=3215 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209838155.568:25): user pid=3215 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1209838160.596:26): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3070 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209838165.491:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2248 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209838167.604:3334): auditd normal halt, sending auid=0 pid=4186 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209838222.702:8194): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1883 res=success
>type=CONFIG_CHANGE msg=audit(1209838222.822:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209838272.918:5): user pid=2735 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209838272.922:6): user pid=2735 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209838273.021:7): user pid=2735 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209838273.151:8): login pid=2735 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209838273.202:9): user pid=2735 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209838273.994:10): user pid=2735 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209838274.014:11): user pid=2735 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209838280.908:12): user pid=3013 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209838280.909:13): user pid=3013 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209841261.243:14): user pid=6030 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209841261.246:15): user pid=6030 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209841261.247:16): login pid=6030 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209841261.249:17): user pid=6030 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209841261.294:18): user pid=6030 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209841261.297:19): user pid=6030 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1209843604.890:20): avc:  denied  { setattr } for  pid=9283 comm="tmpwatch" name="dvips" dev=dm-2 ino=49044 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209843604.890:20): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfb47734 a2=0 a3=973e530 items=0 ppid=9281 pid=9283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209843604.893:21): avc:  denied  { setattr } for  pid=9283 comm="tmpwatch" name="pdftex" dev=dm-2 ino=49045 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209843604.893:21): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfb47734 a2=0 a3=973e530 items=0 ppid=9281 pid=9283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=AVC msg=audit(1209843604.894:22): avc:  denied  { setattr } for  pid=9283 comm="tmpwatch" name="tex" dev=dm-2 ino=49046 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1209843604.894:22): arch=40000003 syscall=30 success=no exit=-13 a0=804ac62 a1=bfb47994 a2=0 a3=973c4f0 items=0 ppid=9281 pid=9283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null)
>type=USER_ACCT msg=audit(1209844861.327:23): user pid=10464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209844861.330:24): user pid=10464 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209844861.330:25): login pid=10464 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209844861.332:26): user pid=10464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209844861.339:27): user pid=10464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209844861.340:28): user pid=10464 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209848461.363:29): user pid=13733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209848461.365:30): user pid=13733 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209848461.366:31): login pid=13733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209848461.368:32): user pid=13733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209848461.372:33): user pid=13733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209848461.372:34): user pid=13733 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209850256.769:35): user pid=15367 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209852061.395:36): user pid=17020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209852061.397:37): user pid=17020 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209852061.397:38): login pid=17020 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209852061.402:39): user pid=17020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209852061.412:40): user pid=17020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209852061.413:41): user pid=17020 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209852101.124:42): user pid=17064 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209852175.758:43): user pid=2735 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1209852175.819:44): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3057 comm="tomboy" sig=11
>type=USER_END msg=audit(1209852175.887:45): user pid=2735 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209852203.576:46): user pid=2540 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209852203.578:47): user pid=2540 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209852203.579:48): login pid=2540 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_ROLE_CHANGE msg=audit(1209852203.591:49): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209852203.716:50): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209852203.717:51): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209852203.718:52): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=FS_RELABEL msg=audit(1209852398.721:53): user pid=17639 uid=0 auid=0 subj=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 msg='op=mass relabel: exe="/sbin/setfiles" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209852622.029:54): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209852622.031:55): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209852628.136:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2270 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209852630.525:8195): auditd normal halt, sending auid=0 pid=18535 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209852683.148:4747): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1892 res=success
>type=CONFIG_CHANGE msg=audit(1209852683.281:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209853302.601:5): user pid=2546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_LOGIN msg=audit(1209853302.603:6): user pid=2546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)'
>type=USER_AUTH msg=audit(1209853310.887:7): user pid=2546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209853310.890:8): user pid=2546 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209853310.890:9): login pid=2546 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209853310.990:10): user pid=2546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209853311.085:11): user pid=2546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209853311.092:12): user pid=2546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209853311.093:13): user pid=2546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209853429.323:14): user pid=2546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209853429.327:15): user pid=2546 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209853434.224:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2279 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209853436.360:4748): auditd normal halt, sending auid=0 pid=4012 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209853488.133:831): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1892 res=success
>type=CONFIG_CHANGE msg=audit(1209853488.254:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209853535.300:5): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209853535.305:6): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209853535.402:7): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209853535.500:8): login pid=2745 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209853535.543:9): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209853536.257:10): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209853536.277:11): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209853543.955:12): user pid=3033 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209853543.956:13): user pid=3033 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209853942.841:14): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3058 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1209853942.880:15): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1209853942.888:16): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1209853960.299:17): user pid=2549 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209853960.301:18): user pid=2549 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209853960.302:19): login pid=2549 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209853960.314:20): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209853960.347:21): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209853960.348:22): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209853960.349:23): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209855162.500:24): user pid=2547 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1209855162.503:25): user pid=2547 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=LOGIN msg=audit(1209855162.503:26): login pid=2547 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209855162.515:27): user pid=2547 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_START msg=audit(1209855162.544:28): user pid=2547 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_ACQ msg=audit(1209855162.545:29): user pid=2547 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_LOGIN msg=audit(1209855162.546:30): user pid=2547 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_ACCT msg=audit(1209855661.714:31): user pid=6468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209855661.716:32): user pid=6468 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209855661.716:33): login pid=6468 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209855661.718:34): user pid=6468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209855661.754:35): user pid=6468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209855661.755:36): user pid=6468 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209856528.293:37): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209856528.295:38): user pid=3561 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=CRED_DISP msg=audit(1209856532.844:39): user pid=2547 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=USER_END msg=audit(1209856532.846:40): user pid=2547 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)'
>type=CRED_DISP msg=audit(1209856532.850:41): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209856532.852:42): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209856538.082:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2279 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209856540.281:832): auditd normal halt, sending auid=0 pid=7861 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209890799.437:9179): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1901 res=success
>type=CONFIG_CHANGE msg=audit(1209890799.558:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209890883.784:5): user pid=2558 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209890883.787:6): user pid=2558 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209890883.788:7): login pid=2558 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209890883.887:8): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209890883.979:9): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209890883.989:10): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209890883.990:11): user pid=2558 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209891661.813:12): user pid=4425 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209891661.815:13): user pid=4425 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209891661.815:14): login pid=4425 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209891661.817:15): user pid=4425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209891661.864:16): user pid=4425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209891661.865:17): user pid=4425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209892285.618:18): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209892285.623:19): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209892285.628:20): user pid=2754 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209892285.722:21): login pid=2754 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1209892285.750:22): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209892286.462:23): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209892286.513:24): user pid=2754 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209892294.115:25): user pid=5458 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209892294.115:26): user pid=5458 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209894480.509:27): user pid=7503 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209894493.277:28): user pid=7547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209894493.279:29): user pid=7547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209894493.373:30): user pid=7547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209894493.374:31): user pid=7547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209895261.894:32): user pid=8322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209895261.896:33): user pid=8322 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209895261.897:34): login pid=8322 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209895261.898:35): user pid=8322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209895261.905:36): user pid=8322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209895261.906:37): user pid=8322 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209896875.044:38): user pid=7547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209896875.048:39): user pid=7547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1209897211.979:40): user pid=20881 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209897211.982:41): user pid=20881 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209897217.040:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2288 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209897219.523:9180): auditd normal halt, sending auid=0 pid=21202 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209897272.569:8261): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1883 res=success
>type=CONFIG_CHANGE msg=audit(1209897272.689:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209897688.830:5): user pid=2540 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209897688.833:6): user pid=2540 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209897688.834:7): login pid=2540 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209897688.932:8): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209897689.013:9): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209897689.023:10): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209897689.024:11): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209898000.328:12): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2776 comm="metacity" sig=6
>type=USER_AUTH msg=audit(1209898000.358:13): user pid=2735 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_LOGIN msg=audit(1209898000.360:14): user pid=2735 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=failed)'
>type=USER_AUTH msg=audit(1209898109.712:15): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209898109.716:16): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209898109.721:17): user pid=3981 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209898109.795:18): login pid=3981 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209898109.823:19): user pid=3981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209898110.557:20): user pid=3981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209898110.559:21): user pid=3981 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209898117.790:22): user pid=4600 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209898117.792:23): user pid=4600 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209898861.854:24): user pid=5490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209898861.856:25): user pid=5490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209898861.857:26): login pid=5490 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209898861.858:27): user pid=5490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209898861.903:28): user pid=5490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209898861.904:29): user pid=5490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_CHAUTHTOK msg=audit(1209901227.715:30): user pid=7664 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="mysql" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1209901296.599:31): user pid=7741 uid=0 auid=0 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="postgres" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_CHAUTHTOK msg=audit(1209901296.657:32): user pid=7745 uid=0 auid=0 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="postgres" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209901358.845:33): user pid=7914 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209901472.055:34): user pid=8047 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209901472.058:35): user pid=8047 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209901472.435:36): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209901472.440:37): user pid=2540 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209901472.795:38): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4657 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209901477.807:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2270 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209901479.918:8262): auditd normal halt, sending auid=0 pid=8440 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209901532.044:7181): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1884 res=success
>type=CONFIG_CHANGE msg=audit(1209901532.166:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209901676.211:5): user pid=2541 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209901676.214:6): user pid=2541 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209901676.214:7): login pid=2541 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209901676.293:8): user pid=2541 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209901676.381:9): user pid=2541 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209901676.395:10): user pid=2541 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209901676.396:11): user pid=2541 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1209902016.706:12): user pid=2541 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209902016.708:13): user pid=2541 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209902021.991:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2271 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209902024.107:7182): auditd normal halt, sending auid=0 pid=4068 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209902076.155:7562): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1892 res=success
>type=CONFIG_CHANGE msg=audit(1209902076.276:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_ACCT msg=audit(1209902461.784:5): user pid=3033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209902461.786:6): user pid=3033 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209902461.787:7): login pid=3033 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1
>type=USER_START msg=audit(1209902461.824:8): user pid=3033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209902461.880:9): user pid=3033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209902461.881:10): user pid=3033 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209903772.271:11): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209903772.275:12): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209903772.363:13): user pid=2745 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209903772.461:14): login pid=2745 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1209903772.504:15): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209903773.201:16): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209903773.249:17): user pid=2745 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209903780.407:18): user pid=4138 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209903780.409:19): user pid=4138 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209906061.912:20): user pid=6425 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209906061.914:21): user pid=6425 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209906061.914:22): login pid=6425 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209906061.920:23): user pid=6425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209906061.932:24): user pid=6425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209906061.933:25): user pid=6425 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209906575.677:26): user pid=2549 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1209906575.681:27): user pid=2549 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1209906575.682:28): login pid=2549 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1209906575.693:29): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1209906575.742:30): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1209906575.743:31): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1209906575.750:32): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1209907592.983:33): user pid=8145 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209909661.966:34): user pid=18806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209909661.969:35): user pid=18806 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209909661.970:36): login pid=18806 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209909661.972:37): user pid=18806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209909661.981:38): user pid=18806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209909661.982:39): user pid=18806 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209911365.527:40): user pid=20550 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1209913071.895:41): user pid=22191 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209913262.014:42): user pid=22437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209913262.017:43): user pid=22437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209913262.018:44): login pid=22437 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209913262.019:45): user pid=22437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209913262.029:46): user pid=22437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209913262.029:47): user pid=22437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209913296.636:48): user pid=22468 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209913296.639:49): user pid=22468 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209913296.733:50): user pid=22468 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209913296.734:51): user pid=22468 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1209913464.255:52): user pid=22744 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209913464.255:53): user pid=22744 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209913464.343:54): user pid=22744 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209913464.591:55): user pid=22744 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1209913824.773:56): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1209913824.773:56): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf9896e8 a3=6 items=0 ppid=1 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1209913824.909:57): avc:  denied  { getattr } for  pid=23152 comm="qemu" path="/home/mihai/xp.img" dev=dm-0 ino=9125695 scontext=system_u:system_r:qemu_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209913824.909:57): arch=40000003 syscall=195 success=no exit=-13 a0=bf904930 a1=bf901f70 a2=c01ff4 a3=bf904930 items=0 ppid=2503 pid=23152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1209913824.909:58): avc:  denied  { read } for  pid=23152 comm="qemu" name="xp.img" dev=dm-0 ino=9125695 scontext=system_u:system_r:qemu_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209913824.909:58): arch=40000003 syscall=5 success=no exit=-13 a0=bf904930 a1=8000 a2=0 a3=8000 items=0 ppid=2503 pid=23152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1209913824.912:59): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1209913846.114:60): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1209913846.114:60): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf9896e8 a3=6 items=0 ppid=1 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1209913846.118:61): avc:  denied  { getattr } for  pid=23199 comm="qemu" path="/home/mihai/xp.img" dev=dm-0 ino=9125695 scontext=system_u:system_r:qemu_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209913846.118:61): arch=40000003 syscall=195 success=no exit=-13 a0=bfad6b00 a1=bfad4140 a2=c01ff4 a3=bfad6b00 items=0 ppid=2503 pid=23199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1209913846.150:62): avc:  denied  { read } for  pid=23199 comm="qemu" name="xp.img" dev=dm-0 ino=9125695 scontext=system_u:system_r:qemu_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209913846.150:62): arch=40000003 syscall=5 success=no exit=-13 a0=bfad6b00 a1=8000 a2=0 a3=8000 items=0 ppid=2503 pid=23199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1209913846.160:63): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1209913846.160:63): arch=40000003 syscall=6 success=yes exit=0 a0=d a1=9444498 a2=5c5d5b0 a3=4 items=0 ppid=1 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1209915198.498:64): user pid=22468 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209915198.501:65): user pid=22468 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1209915231.856:66): user pid=24697 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1209915231.858:67): user pid=24697 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1209915231.988:68): user pid=24697 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1209915231.989:69): user pid=24697 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AVC msg=audit(1209915374.677:70): user pid=1999 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1209915373.805:71): policy loaded auid=500 ses=2
>type=SYSCALL msg=audit(1209915373.805:71): arch=40000003 syscall=4 success=yes exit=3819311 a0=4 a1=b7831008 a2=3a472f a3=bfe8c5c8 items=0 ppid=24931 pid=24948 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 ses=2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1209916861.438:72): user pid=26293 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209916861.441:73): user pid=26293 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209916861.442:74): login pid=26293 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209916861.446:75): user pid=26293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209916861.510:76): user pid=26293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209916861.511:77): user pid=26293 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209917781.413:78): user pid=27124 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1209917851.100:79): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1209917851.100:79): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf9896e8 a3=6 items=0 ppid=1 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1209917851.124:80): avc:  denied  { write } for  pid=27207 comm="qemu" name="xp.img" dev=dm-0 ino=9125695 scontext=system_u:system_r:qemu_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209917851.124:80): arch=40000003 syscall=5 success=no exit=-13 a0=bf8770a0 a1=8002 a2=0 a3=8002 items=0 ppid=2503 pid=27207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1209917851.206:81): avc:  denied  { write } for  pid=27207 comm="qemu" name="XP_SP2_volume.iso" dev=dm-0 ino=7096777 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1209917851.206:81): arch=40000003 syscall=5 success=no exit=-13 a0=bf8770a0 a1=8002 a2=0 a3=8002 items=0 ppid=2503 pid=27207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1209917937.734:82): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=USER_AVC msg=audit(1209918104.141:83): user pid=1999 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1209918103.318:84): policy loaded auid=500 ses=2
>type=SYSCALL msg=audit(1209918103.318:84): arch=40000003 syscall=4 success=yes exit=3819311 a0=4 a1=b77dd008 a2=3a472f a3=bfa37e58 items=0 ppid=27467 pid=27478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 ses=2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_CHAUTHTOK msg=audit(1209918410.613:85): user pid=27769 uid=0 auid=500 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="akmods" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1209918410.784:86): user pid=27774 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="akmods" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1209918428.764:87): user pid=24697 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1209918428.767:88): user pid=24697 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_AUTH msg=audit(1209918504.759:89): user pid=27873 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209918504.762:90): user pid=27873 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1209918504.975:91): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1209918504.990:92): user pid=2549 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1209918506.205:93): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4202 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209918513.414:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2279 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209918515.725:7563): auditd normal halt, sending auid=0 pid=28273 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209918569.345:1713): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1894 res=success
>type=CONFIG_CHANGE msg=audit(1209918569.464:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_START msg=audit(1209918579.572:5): user pid=2395 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="akmods" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1209918579.573:6): user pid=2395 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="akmods" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1209918595.057:7): user pid=2395 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="akmods" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1209918595.058:8): user pid=2395 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="akmods" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1209918727.747:9): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209918727.751:10): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209918727.842:11): user pid=3344 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209918727.933:12): login pid=3344 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209918727.984:13): user pid=3344 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209918728.618:14): user pid=3344 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209918728.662:15): user pid=3344 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209918735.819:16): user pid=3670 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209918735.821:17): user pid=3670 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209920461.845:18): user pid=5320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209920461.847:19): user pid=5320 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209920461.847:20): login pid=5320 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209920461.849:21): user pid=5320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209920461.896:22): user pid=5320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209920461.897:23): user pid=5320 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209924061.921:24): user pid=8547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209924061.922:25): user pid=8547 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209924061.923:26): login pid=8547 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209924061.924:27): user pid=8547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209924061.929:28): user pid=8547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209924061.929:29): user pid=8547 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209927661.951:30): user pid=11776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209927661.953:31): user pid=11776 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209927661.953:32): login pid=11776 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209927661.957:33): user pid=11776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209927661.964:34): user pid=11776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209927661.964:35): user pid=11776 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209930348.779:36): user pid=14190 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209931261.992:37): user pid=15233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209931261.993:38): user pid=15233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209931261.993:39): login pid=15233 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209931261.996:40): user pid=15233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209931262.006:41): user pid=15233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209931262.006:42): user pid=15233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209934861.025:43): user pid=18461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209934861.025:44): user pid=18461 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209934861.026:45): login pid=18461 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209934861.029:46): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209934861.040:47): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209934861.041:48): user pid=18461 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209938461.063:49): user pid=21688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209938461.064:50): user pid=21688 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209938461.064:51): login pid=21688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209938461.065:52): user pid=21688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209938461.069:53): user pid=21688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209938461.069:54): user pid=21688 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209942061.093:55): user pid=24920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209942061.094:56): user pid=24920 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209942061.094:57): login pid=24920 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209942061.098:58): user pid=24920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209942061.104:59): user pid=24920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209942061.104:60): user pid=24920 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209945661.126:61): user pid=28147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209945661.127:62): user pid=28147 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209945661.127:63): login pid=28147 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209945661.128:64): user pid=28147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209945661.131:65): user pid=28147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209945661.132:66): user pid=28147 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209949261.153:67): user pid=31376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209949261.154:68): user pid=31376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209949261.154:69): login pid=31376 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209949261.156:70): user pid=31376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209949261.160:71): user pid=31376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209949261.160:72): user pid=31376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209949321.170:73): user pid=31433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209949321.171:74): user pid=31433 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209949321.172:75): login pid=31433 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1209949321.175:76): user pid=31433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209950757.601:77): user pid=31433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209950757.602:78): user pid=31433 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209952861.622:79): user pid=4647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209952861.625:80): user pid=4647 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209952861.625:81): login pid=4647 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1209952861.627:82): user pid=4647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209952861.633:83): user pid=4647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209952861.634:84): user pid=4647 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209956461.658:85): user pid=7875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209956461.658:86): user pid=7875 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209956461.658:87): login pid=7875 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1209956461.660:88): user pid=7875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209956461.664:89): user pid=7875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209956461.664:90): user pid=7875 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209960061.687:91): user pid=11102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209960061.687:92): user pid=11102 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209960061.687:93): login pid=11102 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1209960061.689:94): user pid=11102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209960061.693:95): user pid=11102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209960061.693:96): user pid=11102 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209962558.345:97): user pid=13347 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1209962572.796:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2281 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209962574.912:1714): auditd normal halt, sending auid=0 pid=13687 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209966278.212:5366): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1894 res=success
>type=CONFIG_CHANGE msg=audit(1209966278.333:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209966318.307:5): user pid=2771 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209966318.312:6): user pid=2771 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209966318.465:7): user pid=2771 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209966319.689:8): login pid=2771 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209966320.101:9): user pid=2771 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209966321.546:10): user pid=2771 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209966321.566:11): user pid=2771 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209966329.223:12): user pid=3018 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209966329.224:13): user pid=3018 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209967262.039:14): user pid=4213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209967262.041:15): user pid=4213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209967262.042:16): login pid=4213 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209967262.047:17): user pid=4213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209967262.092:18): user pid=4213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209967262.092:19): user pid=4213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1209967328.856:20): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3087 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1209967333.940:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2281 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1209967336.057:5367): auditd normal halt, sending auid=0 pid=4637 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1209967389.444:5857): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1908 res=success
>type=CONFIG_CHANGE msg=audit(1209967389.565:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1209967427.191:5): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1209967427.195:6): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1209967427.226:7): user pid=2787 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1209967427.316:8): login pid=2787 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1209967427.369:9): user pid=2787 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209967428.214:10): user pid=2787 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1209967428.234:11): user pid=2787 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1209967434.684:12): user pid=3034 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209967434.684:13): user pid=3034 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209970861.139:14): user pid=6512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209970861.142:15): user pid=6512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209970861.143:16): login pid=6512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1209970861.147:17): user pid=6512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209970861.188:18): user pid=6512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209970861.189:19): user pid=6512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209974461.216:20): user pid=10183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209974461.218:21): user pid=10183 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209974461.218:22): login pid=10183 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1209974461.220:23): user pid=10183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209974461.228:24): user pid=10183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209974461.229:25): user pid=10183 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209975017.312:26): user pid=10776 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209975017.312:27): user pid=10776 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1209975017.434:28): user pid=10776 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1209975090.781:29): user pid=10776 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1209975099.499:30): user pid=11889 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0-s0:c0.c1023 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209978061.737:31): user pid=14599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209978061.738:32): user pid=14599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209978061.738:33): login pid=14599 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1209978061.741:34): user pid=14599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209978061.747:35): user pid=14599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209978061.748:36): user pid=14599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209980518.881:37): user pid=16822 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209981661.770:38): user pid=17931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209981661.771:39): user pid=17931 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209981661.771:40): login pid=17931 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1209981661.774:41): user pid=17931 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209981661.780:42): user pid=17931 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209981661.781:43): user pid=17931 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209985056.803:44): user pid=21097 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209985261.805:45): user pid=21295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209985261.807:46): user pid=21295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209985261.808:47): login pid=21295 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1209985261.810:48): user pid=21295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209985261.816:49): user pid=21295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209985261.816:50): user pid=21295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209988861.840:51): user pid=24663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209988861.841:52): user pid=24663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209988861.841:53): login pid=24663 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1209988861.846:54): user pid=24663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209988861.852:55): user pid=24663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209988861.853:56): user pid=24663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1209992461.877:57): user pid=27924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209992461.877:58): user pid=27924 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209992461.877:59): login pid=27924 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1209992461.879:60): user pid=27924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209992461.882:61): user pid=27924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209992461.883:62): user pid=27924 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209993899.823:63): user pid=29227 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209993899.826:64): user pid=29227 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1209993899.834:65): user pid=29227 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1209993899.835:66): user pid=29227 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1209994292.516:67): user pid=29227 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1209994292.529:68): user pid=29227 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1209996061.908:69): user pid=31306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209996061.910:70): user pid=31306 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209996061.910:71): login pid=31306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1209996061.912:72): user pid=31306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209996061.918:73): user pid=31306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209996061.919:74): user pid=31306 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209998123.887:75): user pid=767 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1209999661.947:76): user pid=2261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1209999661.948:77): user pid=2261 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1209999661.949:78): login pid=2261 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1209999661.950:79): user pid=2261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1209999661.955:80): user pid=2261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1209999661.955:81): user pid=2261 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1209999812.307:82): user pid=2416 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210003261.980:83): user pid=5851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210003261.984:84): user pid=5851 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210003261.985:85): login pid=5851 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1210003261.987:86): user pid=5851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210003261.994:87): user pid=5851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210003261.995:88): user pid=5851 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1210003523.023:89): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3088 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1210003528.990:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2295 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210003531.400:5858): auditd normal halt, sending auid=0 pid=6452 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210064943.533:1724): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1903 res=success
>type=CONFIG_CHANGE msg=audit(1210064943.654:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210065054.563:5): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210065054.568:6): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210065054.604:7): user pid=2791 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210065054.710:8): login pid=2791 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210065054.756:9): user pid=2791 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210065055.536:10): user pid=2791 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210065055.539:11): user pid=2791 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210065063.354:12): user pid=3106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210065063.355:13): user pid=3106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210066364.946:14): user pid=4491 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210066364.946:15): user pid=4491 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210066365.056:16): user pid=4491 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210066613.796:17): user pid=4491 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210066646.823:18): user pid=4786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210066646.825:19): user pid=4786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1210066646.833:20): user pid=4786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1210066646.833:21): user pid=4786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210068061.899:22): user pid=6281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210068061.902:23): user pid=6281 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210068061.903:24): login pid=6281 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210068061.904:25): user pid=6281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210068061.938:26): user pid=6281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210068061.938:27): user pid=6281 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210069086.809:28): user pid=4786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1210069086.814:29): user pid=4786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1210069114.541:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2290 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210069116.791:1725): auditd normal halt, sending auid=0 pid=7750 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210069168.189:3605): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1898 res=success
>type=CONFIG_CHANGE msg=audit(1210069168.309:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210069267.102:5): user pid=2784 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210069267.107:6): user pid=2784 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210069267.205:7): user pid=2784 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210069267.329:8): login pid=2784 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210069267.380:9): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210069268.160:10): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210069268.161:11): user pid=2784 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210069275.095:12): user pid=3087 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210069275.096:13): user pid=3087 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210069620.270:14): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210069620.270:15): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210069620.394:16): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210070852.362:17): user pid=3574 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210071661.626:18): user pid=5524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210071661.628:19): user pid=5524 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210071661.629:20): login pid=5524 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210071661.633:21): user pid=5524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210071661.709:22): user pid=5524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210071661.711:23): user pid=5524 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210075261.738:24): user pid=9431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210075261.740:25): user pid=9431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210075261.740:26): login pid=9431 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210075261.742:27): user pid=9431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210075261.749:28): user pid=9431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210075261.749:29): user pid=9431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210075939.976:30): user pid=10044 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210076001.906:31): user pid=10106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210076001.908:32): user pid=10106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1210076001.917:33): user pid=10106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1210076001.918:34): user pid=10106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_CHAUTHTOK msg=audit(1210078673.981:35): user pid=13103 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1210078673.983:36): user pid=13103 uid=0 auid=500 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=CRED_DISP msg=audit(1210078841.229:37): user pid=10106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1210078841.249:38): user pid=10106 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1210078856.131:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=1950 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210078859.225:3606): auditd normal halt, sending auid=0 pid=16761 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210078914.166:4229): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1905 res=success
>type=CONFIG_CHANGE msg=audit(1210078914.287:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210078955.536:5): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210078955.540:6): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210078955.635:7): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210078955.738:8): login pid=2793 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210078955.776:9): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210078956.534:10): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210078956.537:11): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210078963.070:12): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210078963.071:13): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210079883.413:14): user pid=4011 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210080018.172:15): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3100 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1210080018.214:16): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210080018.225:17): user pid=2793 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210080033.655:18): user pid=4308 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210080033.660:19): user pid=4308 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210080033.665:20): user pid=4308 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210080033.759:21): login pid=4308 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1210080033.782:22): user pid=4308 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210080034.139:23): user pid=4308 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210080034.141:24): user pid=4308 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210080058.445:25): user pid=4691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210080058.447:26): user pid=4691 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210082295.208:27): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4654 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1210082300.183:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2292 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210082302.444:4230): auditd normal halt, sending auid=0 pid=7190 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210148802.880:5234): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1907 res=success
>type=CONFIG_CHANGE msg=audit(1210148803.000:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210148840.697:5): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210148840.701:6): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210148840.797:7): user pid=2795 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210148840.928:8): login pid=2795 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210148840.972:9): user pid=2795 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210148841.785:10): user pid=2795 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210148841.787:11): user pid=2795 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210148850.027:12): user pid=3043 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210148850.029:13): user pid=3043 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1210148903.726:14): user pid=2795 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210148903.765:15): user pid=2795 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1210148904.046:16): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3103 comm="tomboy" sig=11
>type=USER_AUTH msg=audit(1210148923.455:17): user pid=2595 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1210148923.458:18): user pid=2595 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1210148923.458:19): login pid=2595 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_ROLE_CHANGE msg=audit(1210148923.470:20): user pid=2595 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1210148923.501:21): user pid=2595 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1210148923.502:22): user pid=2595 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1210148923.503:23): user pid=2595 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1210149178.657:24): user pid=3273 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210149178.662:25): user pid=3273 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210149178.667:26): user pid=3273 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210149178.763:27): login pid=3273 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1210149178.796:28): user pid=3273 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210149178.852:29): user pid=3273 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210149178.854:30): user pid=3273 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210149182.842:31): user pid=4382 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210149182.843:32): user pid=4382 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1210149211.782:33): user pid=3273 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210149211.798:34): user pid=3273 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=ANOM_ABEND msg=audit(1210149212.218:35): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=4433 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1210149571.923:36): user pid=2595 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1210149571.925:37): user pid=2595 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1210149577.451:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2294 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210149579.707:5235): auditd normal halt, sending auid=0 pid=6545 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210149647.211:4496): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1888 res=success
>type=CONFIG_CHANGE msg=audit(1210149647.332:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210149685.014:5): user pid=2774 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210149685.020:6): user pid=2774 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210149685.116:7): user pid=2774 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210149685.245:8): login pid=2774 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210149685.291:9): user pid=2774 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210149686.026:10): user pid=2774 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210149686.029:11): user pid=2774 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210149719.114:12): user pid=3129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210149719.115:13): user pid=3129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210150861.759:14): user pid=4880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210150861.761:15): user pid=4880 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210150861.762:16): login pid=4880 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210150861.764:17): user pid=4880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210150861.812:18): user pid=4880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210150861.813:19): user pid=4880 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210154461.937:20): user pid=9182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210154461.941:21): user pid=9182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210154461.942:22): login pid=9182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210154461.944:23): user pid=9182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210154461.956:24): user pid=9182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210154461.957:25): user pid=9182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210158062.237:26): user pid=20382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210158062.240:27): user pid=20382 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210158062.241:28): login pid=20382 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1210158062.316:29): user pid=20382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210158062.350:30): user pid=20382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210158062.350:31): user pid=20382 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210161061.172:32): user pid=23700 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210161661.375:33): user pid=24422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210161661.376:34): user pid=24422 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210161661.377:35): login pid=24422 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1210161661.378:36): user pid=24422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210161661.384:37): user pid=24422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210161661.385:38): user pid=24422 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210165261.411:39): user pid=28518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210165261.413:40): user pid=28518 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210165261.413:41): login pid=28518 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1210165261.414:42): user pid=28518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210165261.423:43): user pid=28518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210165261.424:44): user pid=28518 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1210165596.325:45): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3083 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1210165596.343:46): user pid=2774 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210165596.548:47): user pid=2774 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210165614.691:48): user pid=29087 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210165614.695:49): user pid=29087 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210165614.700:50): user pid=29087 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210165614.792:51): login pid=29087 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=7
>type=USER_ROLE_CHANGE msg=audit(1210165614.953:52): user pid=29087 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210165615.640:53): user pid=29087 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210165615.642:54): user pid=29087 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty9 res=success)'
>type=USER_AUTH msg=audit(1210165619.223:55): user pid=29317 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210165619.223:56): user pid=29317 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210167138.016:57): user pid=31238 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210168861.456:58): user pid=785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210168861.458:59): user pid=785 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210168861.458:60): login pid=785 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1210168861.460:61): user pid=785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210168861.468:62): user pid=785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210168861.469:63): user pid=785 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210168964.601:64): user pid=941 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210168964.604:65): user pid=941 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1210168964.726:66): user pid=941 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1210168964.727:67): user pid=941 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_DISP msg=audit(1210169538.149:68): user pid=941 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1210169538.152:69): user pid=941 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=ANOM_ABEND msg=audit(1210169559.395:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2275 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210169562.361:4497): auditd normal halt, sending auid=0 pid=2147 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210169617.498:2666): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1910 res=success
>type=CONFIG_CHANGE msg=audit(1210169617.620:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210169656.905:5): user pid=2798 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210169656.910:6): user pid=2798 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210169656.930:7): user pid=2798 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210169657.022:8): login pid=2798 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210169657.061:9): user pid=2798 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210169657.895:10): user pid=2798 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210169657.898:11): user pid=2798 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210169663.602:12): user pid=3035 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210169663.603:13): user pid=3035 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210172461.657:14): user pid=5840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210172461.659:15): user pid=5840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210172461.660:16): login pid=5840 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210172461.661:17): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210172461.718:18): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210172461.719:19): user pid=5840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1210175904.521:20): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3109 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1210175909.358:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2297 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210175911.707:2667): auditd normal halt, sending auid=0 pid=9420 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210236722.455:5880): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1909 res=success
>type=CONFIG_CHANGE msg=audit(1210236722.577:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210236760.451:5): user pid=2797 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210236760.455:6): user pid=2797 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210236760.484:7): user pid=2797 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210236760.575:8): login pid=2797 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210236760.626:9): user pid=2797 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210236761.494:10): user pid=2797 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210236761.497:11): user pid=2797 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210236768.142:12): user pid=3033 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210236768.143:13): user pid=3033 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210237262.512:14): user pid=3804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210237262.514:15): user pid=3804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210237262.514:16): login pid=3804 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210237262.516:17): user pid=3804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210237262.565:18): user pid=3804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210237262.567:19): user pid=3804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210238112.647:20): user pid=4913 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_ACCT msg=audit(1210238112.651:21): user pid=4913 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_START msg=audit(1210238112.787:22): user pid=4913 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_ACQ msg=audit(1210238112.789:23): user pid=4913 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=CRED_DISP msg=audit(1210239291.733:24): user pid=4913 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=USER_END msg=audit(1210239291.736:25): user pid=4913 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)'
>type=ANOM_ABEND msg=audit(1210239410.997:26): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3115 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1210239411.049:27): user pid=2797 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210239411.059:28): user pid=2797 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210239426.007:29): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210239426.012:30): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210239426.017:31): user pid=6700 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210239426.108:32): login pid=6700 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=3
>type=USER_ROLE_CHANGE msg=audit(1210239426.131:33): user pid=6700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210239426.518:34): user pid=6700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210239426.520:35): user pid=6700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210239428.885:36): user pid=6989 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210239428.892:37): user pid=6989 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210239597.142:38): auid=500 uid=500 gid=500 ses=3 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=7053 comm="tomboy" sig=11
>type=CRED_DISP msg=audit(1210239597.183:39): user pid=6700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210239597.216:40): user pid=6700 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210239619.609:41): user pid=2601 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1210239619.612:42): user pid=2601 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1210239619.613:43): login pid=2601 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1210239619.626:44): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1210239619.657:45): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1210239619.657:46): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1210239619.658:47): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1210239669.381:48): auid=4294967295 uid=42 gid=42 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=7550 comm="metacity" sig=6
>type=CRED_DISP msg=audit(1210239688.570:49): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1210239688.573:50): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1210239693.525:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2296 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210239695.779:5881): auditd normal halt, sending auid=0 pid=9174 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210239747.420:8856): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1894 res=success
>type=CONFIG_CHANGE msg=audit(1210239747.542:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210239796.477:5): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210239796.482:6): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210239796.574:7): user pid=2782 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210239796.664:8): login pid=2782 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210239796.704:9): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210239797.495:10): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210239797.497:11): user pid=2782 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210239804.087:12): user pid=3029 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210239804.088:13): user pid=3029 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210240861.369:14): user pid=4326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210240861.371:15): user pid=4326 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210240861.372:16): login pid=4326 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210240861.373:17): user pid=4326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210240861.424:18): user pid=4326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210240861.425:19): user pid=4326 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210243497.770:20): user pid=6889 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210244461.456:21): user pid=7813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210244461.459:22): user pid=7813 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210244461.460:23): login pid=7813 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210244461.463:24): user pid=7813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210244461.473:25): user pid=7813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210244461.473:26): user pid=7813 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210248061.590:27): user pid=14854 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210248061.592:28): user pid=14854 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210248061.593:29): login pid=14854 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1210248061.595:30): user pid=14854 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210248061.601:31): user pid=14854 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210248061.602:32): user pid=14854 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210249898.514:33): user pid=16531 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210250877.606:34): user pid=17477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210250877.609:35): user pid=17477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_START msg=audit(1210250877.787:36): user pid=17477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=CRED_ACQ msg=audit(1210250877.789:37): user pid=17477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210251661.625:38): user pid=18270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210251661.626:39): user pid=18270 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210251661.626:40): login pid=18270 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1210251661.631:41): user pid=18270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210251661.645:42): user pid=18270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210251661.647:43): user pid=18270 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210253694.880:44): user pid=17477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_END msg=audit(1210253694.884:45): user pid=17477 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)'
>type=USER_ACCT msg=audit(1210255261.676:46): user pid=21684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210255261.678:47): user pid=21684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210255261.678:48): login pid=21684 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1210255261.684:49): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210255261.694:50): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210255261.695:51): user pid=21684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210258861.719:52): user pid=24935 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210258861.720:53): user pid=24935 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210258861.720:54): login pid=24935 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1210258861.724:55): user pid=24935 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210258861.732:56): user pid=24935 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210258861.732:57): user pid=24935 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1210259116.718:58): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:mono_t:s0-s0:c0.c1023 pid=3103 comm="tomboy" sig=11
>type=ANOM_ABEND msg=audit(1210259123.011:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2281 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210259125.550:8857): auditd normal halt, sending auid=0 pid=25526 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210322874.455:4656): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=1908 res=success
>type=CONFIG_CHANGE msg=audit(1210322874.577:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210322953.600:5): user pid=2796 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210322953.605:6): user pid=2796 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210322953.640:7): user pid=2796 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210322953.729:8): login pid=2796 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210322953.804:9): user pid=2796 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210322954.605:10): user pid=2796 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="mihai" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210322954.608:11): user pid=2796 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210322961.474:12): user pid=3060 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210322961.475:13): user pid=3060 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="mihai" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210323661.450:14): user pid=4108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210323661.454:15): user pid=4108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210323661.454:16): login pid=4108 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210323661.456:17): user pid=4108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210323661.499:18): user pid=4108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210323661.500:19): user pid=4108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210327261.524:20): user pid=8108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210327261.525:21): user pid=8108 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210327261.525:22): login pid=8108 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210327261.529:23): user pid=8108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210327261.533:24): user pid=8108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210327261.534:25): user pid=8108 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210327353.757:26): user pid=8218 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210330759.168:27): user pid=12899 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1210330759.171:28): user pid=12899 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_START msg=audit(1210330759.281:29): user pid=12899 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=CRED_ACQ msg=audit(1210330759.281:30): user pid=12899 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)'
>type=USER_ACCT msg=audit(1210330861.561:31): user pid=13062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210330861.563:32): user pid=13062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210330861.564:33): login pid=13062 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1210330861.565:34): user pid=13062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210330861.572:35): user pid=13062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210330861.573:36): user pid=13062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1210330897.620:37): user pid=2015 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1210330896.807:38): policy loaded auid=500 ses=1
>type=SYSCALL msg=audit(1210330896.807:38): arch=40000003 syscall=4 success=yes exit=3819299 a0=4 a1=b7981008 a2=3a4723 a3=bfbdb728 items=0 ppid=13092 pid=13108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1210332325.758:39): user pid=14768 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210332325.758:40): user pid=14768 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210332325.936:41): user pid=14768 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210332327.817:42): user pid=14768 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1210332338.954:43): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210332338.954:43): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210332339.030:44): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=USER_AUTH msg=audit(1210332642.226:45): user pid=15185 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210332642.226:46): user pid=15185 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210332642.232:47): user pid=15185 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210332642.390:48): user pid=15185 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1210332761.196:49): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210332761.196:49): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210332796.458:50): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=USER_AUTH msg=audit(1210333060.570:51): user pid=15692 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210333060.570:52): user pid=15692 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210333060.576:53): user pid=15692 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210333060.744:54): user pid=15692 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1210333172.304:55): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210333172.304:55): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1210333172.308:56): avc:  denied  { getattr } for  pid=15842 comm="qemu" name="/" dev=tmpfs ino=6796 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1210333172.308:56): arch=40000003 syscall=268 success=no exit=-13 a0=8118ffa a1=54 a2=bff3a780 a3=bff3b101 items=0 ppid=2550 pid=15842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333172.314:57): avc:  denied  { write } for  pid=15842 comm="qemu" name="/" dev=tmpfs ino=6796 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1210333172.314:57): arch=40000003 syscall=5 success=no exit=-13 a0=bff3a7e0 a1=80c2 a2=180 a3=36b37 items=0 ppid=2550 pid=15842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333172.393:58): avc:  denied  { getattr } for  pid=15842 comm="qemu" path="/home/mihai/win/XP_SP2_VOLUME/XP_SP2_volume.iso" dev=dm-0 ino=7096777 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1210333172.393:58): arch=40000003 syscall=195 success=no exit=-13 a0=bff3a760 a1=bff37da0 a2=5beff4 a3=bff3a760 items=0 ppid=2550 pid=15842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333172.393:59): avc:  denied  { read } for  pid=15842 comm="qemu" name="XP_SP2_volume.iso" dev=dm-0 ino=7096777 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file
>type=SYSCALL msg=audit(1210333172.393:59): arch=40000003 syscall=5 success=no exit=-13 a0=bff3a760 a1=8000 a2=0 a3=8000 items=0 ppid=2550 pid=15842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210333172.396:60): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1210333271.398:61): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210333271.398:61): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1210333271.403:62): avc:  denied  { getattr } for  pid=16018 comm="qemu" name="/" dev=tmpfs ino=6796 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1210333271.403:62): arch=40000003 syscall=268 success=no exit=-13 a0=8118ffa a1=54 a2=bf96a9b0 a3=bf96b331 items=0 ppid=2550 pid=16018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333271.431:63): avc:  denied  { write } for  pid=16018 comm="qemu" name="/" dev=tmpfs ino=6796 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1210333271.431:63): arch=40000003 syscall=5 success=no exit=-13 a0=bf96aa10 a1=80c2 a2=180 a3=374e6 items=0 ppid=2550 pid=16018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333271.543:64): avc:  denied  { read write } for  pid=16018 comm="qemu" name="kqemu" dev=tmpfs ino=7035 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1210333271.543:64): arch=40000003 syscall=5 success=no exit=-13 a0=812aa21 a1=8002 a2=0 a3=8002 items=0 ppid=2550 pid=16018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210333943.937:65): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=ANOM_PROMISCUOUS msg=audit(1210333950.726:66): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210333950.726:66): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1210333950.733:67): avc:  denied  { getattr } for  pid=16852 comm="qemu" name="/" dev=tmpfs ino=6796 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1210333950.733:67): arch=40000003 syscall=268 success=no exit=-13 a0=8118ffa a1=54 a2=bfd185b0 a3=bfd18f31 items=0 ppid=2550 pid=16852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333950.736:68): avc:  denied  { write } for  pid=16852 comm="qemu" name="/" dev=tmpfs ino=6796 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1210333950.736:68): arch=40000003 syscall=5 success=no exit=-13 a0=bfd18610 a1=80c2 a2=180 a3=4b7ee items=0 ppid=2550 pid=16852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210333950.905:69): avc:  denied  { read write } for  pid=16852 comm="qemu" name="kqemu" dev=tmpfs ino=7035 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1210333950.905:69): arch=40000003 syscall=5 success=no exit=-13 a0=812aa21 a1=8002 a2=0 a3=8002 items=0 ppid=2550 pid=16852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210334310.520:70): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=USER_ACCT msg=audit(1210334461.909:71): user pid=17491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210334461.911:72): user pid=17491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210334461.912:73): login pid=17491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1210334461.966:74): user pid=17491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210334462.076:75): user pid=17491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210334462.077:76): user pid=17491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1210335211.532:77): user pid=2015 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1210335210.702:78): policy loaded auid=500 ses=1
>type=SYSCALL msg=audit(1210335210.702:78): arch=40000003 syscall=4 success=yes exit=3819371 a0=4 a1=b7850008 a2=3a476b a3=bfaaa7c8 items=0 ppid=18357 pid=18371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AVC msg=audit(1210335481.896:79): user pid=2015 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1210335481.051:80): policy loaded auid=500 ses=1
>type=SYSCALL msg=audit(1210335481.051:80): arch=40000003 syscall=4 success=yes exit=3819323 a0=4 a1=b77fc008 a2=3a473b a3=bfb56698 items=0 ppid=18692 pid=18707 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1210335556.663:81): user pid=18786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210335556.663:82): user pid=18786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210335556.804:83): user pid=18786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210335557.339:84): user pid=18786 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1210335635.963:85): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210335635.963:85): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1210335635.967:86): avc:  denied  { add_name } for  pid=18909 comm="qemu" name="qemuYhPA3H" scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1210335635.967:86): arch=40000003 syscall=5 success=no exit=-13 a0=bfe0beb0 a1=80c2 a2=180 a3=57ca9 items=0 ppid=2550 pid=18909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210335636.027:87): avc:  denied  { ioctl } for  pid=18909 comm="qemu" path="/dev/kqemu" dev=tmpfs ino=7035 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1210335636.027:87): arch=40000003 syscall=54 success=no exit=-13 a0=9 a1=80047103 a2=bfe0b6cc a3=a6a6420 items=0 ppid=2550 pid=18909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210336345.720:88): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=USER_AUTH msg=audit(1210336719.625:89): user pid=20134 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1210336754.559:90): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210336754.559:90): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1210336754.568:91): avc:  denied  { add_name } for  pid=20180 comm="qemu" name="qemuvuPAD5" scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
>type=SYSCALL msg=audit(1210336754.568:91): arch=40000003 syscall=5 success=no exit=-13 a0=bf845140 a1=80c2 a2=180 a3=6dbbb items=0 ppid=2550 pid=20180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=AVC msg=audit(1210336754.668:92): avc:  denied  { ioctl } for  pid=20180 comm="qemu" path="/dev/kqemu" dev=tmpfs ino=7035 scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1210336754.668:92): arch=40000003 syscall=54 success=no exit=-13 a0=8 a1=80047103 a2=bf84495c a3=b0f23f0 items=0 ppid=2550 pid=20180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=USER_AVC msg=audit(1210337252.048:93): user pid=2015 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1210337251.183:94): policy loaded auid=500 ses=1
>type=SYSCALL msg=audit(1210337251.183:94): arch=40000003 syscall=4 success=yes exit=3819335 a0=4 a1=b787d008 a2=3a4747 a3=bffd7858 items=0 ppid=20797 pid=20812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1210337351.937:95): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=USER_AUTH msg=audit(1210337388.326:96): user pid=20979 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210337388.327:97): user pid=20979 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210337388.604:98): user pid=20979 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210337389.395:99): user pid=20979 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_PROMISCUOUS msg=audit(1210337400.036:100): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1210337400.036:100): arch=40000003 syscall=54 success=yes exit=0 a0=5 a1=89a2 a2=bf848da8 a3=6 items=0 ppid=1 pid=2550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0 key=(null)
>type=AVC msg=audit(1210337400.040:101): avc:  denied  { create } for  pid=21015 comm="qemu" name="qemugUuFND" scontext=system_u:system_r:qemu_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1210337400.040:101): arch=40000003 syscall=5 success=no exit=-13 a0=bf8178d0 a1=80c2 a2=180 a3=73e19 items=0 ppid=2550 pid=21015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="qemu" exe="/usr/bin/qemu" subj=system_u:system_r:qemu_t:s0 key=(null)
>type=USER_AVC msg=audit(1210337855.770:102): user pid=2015 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1210337853.485:103): policy loaded auid=500 ses=1
>type=SYSCALL msg=audit(1210337853.485:103): arch=40000003 syscall=4 success=yes exit=3819335 a0=4 a1=b77e6008 a2=3a4747 a3=bf840dd8 items=0 ppid=21588 pid=21617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1210338061.169:104): user pid=21860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210338061.171:105): user pid=21860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210338061.171:106): login pid=21860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1210338061.211:107): user pid=21860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210338061.266:108): user pid=21860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210338061.267:109): user pid=21860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210341661.527:110): user pid=26186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210341661.540:111): user pid=26186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210341661.541:112): login pid=26186 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1210341661.573:113): user pid=26186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210341661.652:114): user pid=26186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210341661.653:115): user pid=26186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210341807.303:116): user pid=26358 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="mihai" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'

Actions: View

Attachments on bug 445848: 304944