Attachment 305212 Details for Bug 446175 – /var/log/audit/audit.log

/var/log/audit/audit.log

audit.log (text/plain), 306.00 KB, created by Matěj Cepl on 2008-05-13 08:07:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2008-05-13 08:07:30 UTC

Size: 306.00 KB

patch

obsolete

>type=DAEMON_ROTATE msg=audit(1210028465.918:9413): auditd sending auid=500 pid=4843 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
>type=USYS_CONFIG msg=audit(1210029037.500:75): user pid=5728 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210067335.574:76): user pid=5909 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210067340.541:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4459 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210067344.143:78): user pid=6068 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210067394.938:79): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=6271 comm="bitlbee" sig=11
>type=USER_ACCT msg=audit(1210068061.228:80): user pid=6970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210068061.231:81): user pid=6970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210068061.231:82): login pid=6970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210068061.234:83): user pid=6970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210068061.245:84): user pid=6970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210068061.245:85): user pid=6970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210068729.127:86): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210068729.133:87): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210068729.136:88): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210068729.138:89): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210068729.139:90): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210068729.140:91): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530362E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530362E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210068729.145:92): user pid=9076 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=AVC msg=audit(1210069308.871:93): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=6872 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.871:93): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.873:94): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=6875 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.873:94): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.874:95): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=6998 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.874:95): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.875:96): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7463 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.875:96): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.875:97): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7466 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.875:97): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.875:98): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7469 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.875:98): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.876:99): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7472 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.876:99): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.876:100): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7475 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.876:100): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.876:101): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7860 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.876:101): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.876:102): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7862 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.876:102): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.876:103): avc:  denied  { sys_nice } for  pid=10085 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1210069308.876:103): arch=40000003 syscall=3 success=yes exit=195 a0=5 a1=ac2960 a2=3ff a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.876:104): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7864 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.876:104): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.877:105): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7866 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.877:105): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.877:106): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7868 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.877:106): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.877:107): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7892 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.877:107): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.877:108): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=7974 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.877:108): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.878:109): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=8220 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.878:109): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.878:110): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=8223 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.878:110): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.878:111): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=8229 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.878:111): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.878:112): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=8232 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.878:112): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.878:113): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9695 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.878:113): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.879:114): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9698 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.879:114): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.879:115): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9701 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.879:115): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.879:116): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9707 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.879:116): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.879:117): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9710 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.879:117): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.879:118): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9713 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.879:118): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.879:119): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9719 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.879:119): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.880:120): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9722 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.880:120): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.880:121): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9725 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.880:121): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.880:122): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9743 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_crond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.880:122): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.880:123): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9748 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.880:123): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.881:124): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=9788 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.881:124): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.881:125): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24074 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.881:125): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.881:126): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24076 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.881:126): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.881:127): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24077 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.881:127): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.881:128): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24078 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.881:128): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.882:129): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24079 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.882:129): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.882:130): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=10747 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.882:130): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.882:131): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24091 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.882:131): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.883:132): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24097 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.883:132): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.884:133): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24116 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.884:133): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.886:134): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=24143 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.886:134): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.888:135): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=125164 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vpnc_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.888:135): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.888:136): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=125170 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.888:136): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.888:137): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=125179 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210069308.888:137): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210069308.889:138): avc:  denied  { read } for  pid=10085 comm="ps" name="stat" dev=proc ino=125268 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file
>type=SYSCALL msg=audit(1210069308.889:138): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=USYS_CONFIG msg=audit(1210069309.500:139): user pid=10033 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210071548.000:140): user pid=10315 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210071552.345:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=6044 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210071554.166:142): user pid=10440 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210071640.500:143): user pid=10724 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210085967.700:144): user pid=10905 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210085971.049:145): user pid=11038 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210085972.624:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=10418 comm="nm-system-setti" sig=6
>type=USER_ACCT msg=audit(1210086061.046:147): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210086061.049:148): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210086061.050:149): login pid=11211 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1210086061.057:150): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210086061.069:151): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210086061.069:152): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210087015.499:153): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210087015.502:154): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210087015.503:155): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210087015.504:156): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210087015.504:157): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210087015.505:158): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6570697068616E792D6465627567696E666F2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D646576656C2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210087015.507:159): user pid=12611 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1210087429.420:160): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210087434.690:161): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210087434.697:162): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210087434.737:163): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210087434.790:164): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210087434.791:165): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210087434.792:166): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6570697068616E792D6465627567696E666F2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D646576656C2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210087434.797:167): user pid=28801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1210087789.711:168): user pid=29184 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210087805.326:169): user pid=29184 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210087816.813:170): user pid=29184 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210087905.933:171): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210087905.938:172): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210087905.977:173): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210087905.998:174): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210087905.998:175): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210087905.998:176): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F7573722F62696E2F79756D2072656D6F7665206570697068616E792A (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210087906.005:177): user pid=29314 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_CHAUTHTOK msg=audit(1210088535.314:178): user pid=30238 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_CHAUTHTOK msg=audit(1210088535.314:179): user pid=30238 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)'
>type=ANOM_ABEND msg=audit(1210088952.702:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2247 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210088955.551:9414): auditd normal halt, sending auid=0 pid=11177 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210089016.358:529): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=2070 res=success
>type=CONFIG_CHANGE msg=audit(1210089016.499:3): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210089063.390:4): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210089063.392:5): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210089063.436:6): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210089063.471:7): login pid=2802 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210089063.510:8): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210089067.439:9): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210089067.447:10): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=AVC msg=audit(1210089356.474:11): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=1752 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.474:11): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.475:12): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=1755 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.475:12): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.478:13): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=4758 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.478:13): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:14): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7214 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.479:14): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:15): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7217 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.479:15): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:16): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7220 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.479:16): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:17): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7223 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.479:17): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:18): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7226 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.479:18): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:19): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7610 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.479:19): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.479:20): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7612 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.479:20): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.480:21): avc:  denied  { sys_nice } for  pid=3976 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1210089356.480:21): arch=40000003 syscall=3 success=yes exit=194 a0=5 a1=ac2960 a2=3ff a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.480:22): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7614 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.480:22): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.480:23): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7616 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.480:23): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.480:24): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7618 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.480:24): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.481:25): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7642 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.481:25): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.481:26): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7725 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.481:26): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.481:27): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7969 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.481:27): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.481:28): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7972 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.481:28): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.481:29): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7978 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.481:29): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.482:30): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=7981 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.482:30): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.482:31): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9094 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.482:31): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.482:32): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9097 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.482:32): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.482:33): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9100 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.482:33): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.482:34): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9106 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.482:34): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.482:35): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9109 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.482:35): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.483:36): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9112 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.483:36): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.483:37): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9118 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.483:37): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.483:38): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9121 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.483:38): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.483:39): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9124 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.483:39): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.484:40): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9142 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_crond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.484:40): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.484:41): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9145 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.484:41): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.484:42): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=9154 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.484:42): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.484:43): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30699 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.484:43): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.484:44): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30705 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.484:44): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.484:45): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30708 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.484:45): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.485:46): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30711 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.485:46): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.485:47): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30714 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.485:47): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.485:48): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=10158 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.485:48): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.486:49): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30745 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.486:49): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.486:50): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30773 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.486:50): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.487:51): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30812 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.487:51): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.488:52): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30836 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.488:52): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.488:53): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30850 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.488:53): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.489:54): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30892 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vpnc_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.489:54): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.490:55): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30903 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210089356.490:55): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210089356.490:56): avc:  denied  { read } for  pid=3976 comm="ps" name="stat" dev=proc ino=30959 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file
>type=SYSCALL msg=audit(1210089356.490:56): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=USYS_CONFIG msg=audit(1210089357.500:57): user pid=3925 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210105922.986:58): user pid=4124 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210105923.432:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0 pid=2575 comm="NetworkManager" sig=6
>type=ANOM_ABEND msg=audit(1210105927.411:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=2585 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210105927.494:61): user pid=4251 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210105951.767:62): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210105951.772:63): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210105951.774:64): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210105951.778:65): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210105951.779:66): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210105951.781:67): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210105951.783:68): user pid=4308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210106036.820:69): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210106036.824:70): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210106036.825:71): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210106036.825:72): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210106036.828:73): user pid=4480 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1210106057.689:74): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210106057.695:75): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210106057.696:76): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210106057.698:77): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210106057.699:78): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210106057.699:79): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210106057.703:80): user pid=4612 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210106232.627:81): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210106232.627:82): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210106232.628:83): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210106232.628:84): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530362E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530362E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210106232.630:85): user pid=5978 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210106277.449:86): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210106277.450:87): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210106277.451:88): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210106277.451:89): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530362E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530362E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210106277.453:90): user pid=6010 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1210106373.170:91): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=6072 comm="bitlbee" sig=8
>type=USER_ACCT msg=audit(1210107661.909:92): user pid=7392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210107661.912:93): user pid=7392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210107661.913:94): login pid=7392 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210107661.918:95): user pid=7392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210107661.992:96): user pid=7392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210107661.992:97): user pid=7392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210110210.369:98): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210110210.372:99): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210110210.577:100): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210110210.653:101): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210110210.654:102): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210110210.671:103): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210110210.675:104): user pid=26626 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=ANOM_ABEND msg=audit(1210110333.067:105): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=24110 comm="bitlbee" sig=8
>type=ANOM_ABEND msg=audit(1210110484.425:106): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=11787 comm="bitlbee" sig=8
>type=AVC msg=audit(1210110576.544:107): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209299 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.544:107): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.544:108): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209302 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.544:108): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.546:109): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209395 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.546:109): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.547:110): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209428 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.547:110): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.547:111): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209431 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.547:111): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.547:112): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209434 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.547:112): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.547:113): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209437 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.547:113): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.547:114): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209440 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.547:114): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.547:115): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209443 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.547:115): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.548:116): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209446 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.548:116): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.548:117): avc:  denied  { sys_nice } for  pid=24472 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1210110576.548:117): arch=40000003 syscall=3 success=yes exit=194 a0=5 a1=ac2960 a2=3ff a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.548:118): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209449 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.548:118): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.548:119): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209452 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.548:119): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.548:120): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209516 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.548:120): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.549:121): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209537 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.549:121): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.549:122): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209543 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.549:122): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.549:123): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209546 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.549:123): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.549:124): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209549 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.549:124): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.549:125): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209555 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.549:125): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.550:126): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209558 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.550:126): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.550:127): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209561 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.550:127): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.550:128): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209564 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.550:128): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.550:129): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209567 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.550:129): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.550:130): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209573 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.550:130): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.551:131): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209576 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.551:131): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.551:132): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209579 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.551:132): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.551:133): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209585 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.551:133): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.551:134): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209588 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.551:134): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.551:135): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209591 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.551:135): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.552:136): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209610 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_crond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.552:136): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.552:137): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209613 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.552:137): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.552:138): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209616 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.552:138): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.552:139): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209622 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.552:139): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.552:140): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209625 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.552:140): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.553:141): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209628 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.553:141): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.553:142): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209631 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.553:142): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.553:143): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209652 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.553:143): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.554:144): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209661 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.554:144): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.554:145): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209676 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.554:145): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.555:146): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209776 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.555:146): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.556:147): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209806 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.556:147): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.558:148): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209902 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:NetworkManager_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.558:148): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.558:149): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=209914 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:vpnc_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.558:149): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.559:150): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=234109 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.559:150): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.559:151): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=234118 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210110576.559:151): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210110576.560:152): avc:  denied  { read } for  pid=24472 comm="ps" name="stat" dev=proc ino=234434 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file
>type=SYSCALL msg=audit(1210110576.560:152): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=USYS_CONFIG msg=audit(1210110577.500:153): user pid=24445 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210111651.502:154): user pid=24665 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210111656.869:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4353 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210111670.355:156): user pid=24867 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210112382.499:157): user pid=25808 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210177779.654:158): user pid=25983 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210177784.555:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=24836 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210177788.207:160): user pid=26141 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210177847.253:161): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210177847.258:162): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210177847.259:163): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210177847.262:164): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210177847.263:165): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210177847.264:166): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210177847.269:167): user pid=26332 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=ANOM_ABEND msg=audit(1210177878.272:168): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=26374 comm="bitlbee" sig=11
>type=USER_AUTH msg=audit(1210178179.495:169): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210178179.510:170): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210178179.512:171): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210178179.521:172): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210178179.521:173): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210178179.522:174): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530372E312E6663392E693338362E72706D (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210178179.524:175): user pid=27994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210178399.455:176): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210178399.462:177): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210178399.463:178): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210178399.465:179): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210178399.473:180): user pid=28240 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210179661.756:181): user pid=29814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210179661.759:182): user pid=29814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210179661.760:183): login pid=29814 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210179661.845:184): user pid=29814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210179661.917:185): user pid=29814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210179661.917:186): user pid=29814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210183262.195:187): user pid=32710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210183262.199:188): user pid=32710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210183262.199:189): login pid=32710 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1210183262.303:190): user pid=32710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210183262.382:191): user pid=32710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210183262.383:192): user pid=32710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210183705.769:193): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1210183705.774:194): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1210183705.775:195): login pid=2635 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5
>type=USER_ROLE_CHANGE msg=audit(1210183705.999:196): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1210183706.056:197): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1210183706.298:198): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1210183706.299:199): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1210183787.830:200): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/tty1 res=success)'
>type=USER_ACCT msg=audit(1210183787.836:201): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/tty1 res=success)'
>type=CRED_ACQ msg=audit(1210183787.870:202): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/tty1 res=success)'
>type=USER_START msg=audit(1210183787.872:203): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/tty1 res=success)'
>type=USER_END msg=audit(1210183787.872:204): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/tty1 res=success)'
>type=USER_CMD msg=audit(1210183787.873:205): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F6465627567696E666F2D696E7374616C6C206D657461636974792E69333836 (terminal=tty1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210183787.878:206): user pid=768 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/tty1 res=success)'
>type=USER_ACCT msg=audit(1210186861.844:207): user pid=4122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210186861.846:208): user pid=4122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210186861.846:209): login pid=4122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1210186861.930:210): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210186862.116:211): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210186862.116:212): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210187979.358:213): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210187979.363:214): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210187979.448:215): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210187979.450:216): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210187979.451:217): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210187979.452:218): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D646F776E6C6F61646572202D2D736F75726365207468756E64657262697264 (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210187979.456:219): user pid=5067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210190461.708:220): user pid=27510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210190461.717:221): user pid=27510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210190461.718:222): login pid=27510 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1210190461.812:223): user pid=27510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210190462.054:224): user pid=27510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210190462.054:225): user pid=27510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210192534.136:226): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1210192534.142:227): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/2 res=success)'
>type=CRED_ACQ msg=audit(1210192534.327:228): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/2 res=success)'
>type=USER_START msg=audit(1210192534.437:229): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/2 res=success)'
>type=USER_END msg=audit(1210192534.438:230): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/2 res=success)'
>type=USER_CMD msg=audit(1210192534.439:231): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F7468756E646572626972642D6465627567696E666F2D322E302E302E31342D312E302E6D63494D41502E312E6663392E693338362E72706D2052504D532F693338362F7468756E646572626972642D322E302E302E31342D312E302E6D63494D41502E312E6663392E693338362E72706D (terminal=pts/2 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210192534.442:232): user pid=25844 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/2 res=success)'
>type=USER_ACCT msg=audit(1210194061.838:233): user pid=28354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210194061.949:234): user pid=28354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210194061.950:235): login pid=28354 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8
>type=USER_START msg=audit(1210194062.068:236): user pid=28354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210194062.205:237): user pid=28354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210194062.206:238): user pid=28354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210197661.357:239): user pid=1186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210197661.360:240): user pid=1186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210197661.361:241): login pid=1186 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9
>type=USER_START msg=audit(1210197661.410:242): user pid=1186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210197661.474:243): user pid=1186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210197661.475:244): user pid=1186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210201261.857:245): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210201261.897:246): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210201261.897:247): login pid=4429 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10
>type=USER_START msg=audit(1210201261.936:248): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210201262.035:249): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210201262.035:250): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1210204788.500:251): user pid=7540 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210241105.254:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:bluetooth_t:s0 pid=2298 comm="hcid" sig=6
>type=USYS_CONFIG msg=audit(1210241103.634:253): user pid=7818 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210241108.664:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=26118 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210241110.914:255): user pid=7933 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210244461.750:256): user pid=11144 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210244461.754:257): user pid=11144 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210244461.754:258): login pid=11144 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11
>type=USER_START msg=audit(1210244461.803:259): user pid=11144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210244461.867:260): user pid=11144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210244461.867:261): user pid=11144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210247039.963:262): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210247039.969:263): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210247040.062:264): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210247040.064:265): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210247040.065:266): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210247040.066:267): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D206C697374202A6A736F6E2A (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210247040.070:268): user pid=13222 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1210247702.321:269): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210247702.323:270): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210247702.518:271): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210247702.549:272): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210247702.550:273): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210247702.550:274): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C20707974686F6E2D64656D6A736F6E2E6E6F61726368 (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210247702.555:275): user pid=14053 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210248061.407:276): user pid=14593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210248061.416:277): user pid=14593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210248061.416:278): login pid=14593 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12
>type=USER_START msg=audit(1210248061.523:279): user pid=14593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210248061.616:280): user pid=14593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210248061.616:281): user pid=14593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210251503.871:282): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210251503.876:283): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210251503.941:284): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210251503.972:285): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210251503.972:286): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210251503.974:287): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D206C697374202A6A736F6E2A (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210251503.979:288): user pid=17316 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210251661.895:289): user pid=17571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210251661.900:290): user pid=17571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210251661.900:291): login pid=17571 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13
>type=USER_START msg=audit(1210251661.949:292): user pid=17571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210251662.046:293): user pid=17571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210251662.046:294): user pid=17571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210251686.454:295): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210251686.456:296): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210251686.456:297): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210251686.457:298): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C20707974686F6E2D73696D706C656A736F6E (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210251686.461:299): user pid=17595 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=ANOM_ABEND msg=audit(1210254116.225:300): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=21567 comm="evolution" sig=11
>type=USER_ACCT msg=audit(1210255261.710:301): user pid=22815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210255261.719:302): user pid=22815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210255261.720:303): login pid=22815 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14
>type=USER_START msg=audit(1210255261.790:304): user pid=22815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210255261.924:305): user pid=22815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210255261.925:306): user pid=22815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210255517.840:307): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)'
>type=USER_ACCT msg=audit(1210255517.843:308): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)'
>type=CRED_ACQ msg=audit(1210255518.071:309): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)'
>type=USER_START msg=audit(1210255518.072:310): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)'
>type=USER_END msg=audit(1210255518.073:311): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)'
>type=USER_CMD msg=audit(1210255518.073:312): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd="/usr/bin/mailq" (terminal=pts/3 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210255518.078:313): user pid=23071 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)'
>type=USER_ACCT msg=audit(1210258862.288:314): user pid=25977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210258862.292:315): user pid=25977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210258862.292:316): login pid=25977 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15
>type=USER_START msg=audit(1210258862.398:317): user pid=25977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210258862.539:318): user pid=25977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210258862.540:319): user pid=25977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1210262398.499:320): user pid=29434 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210264181.581:321): user pid=29659 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210264187.880:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=7923 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210264190.152:323): user pid=29810 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210264539.500:324): user pid=30643 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210276907.618:325): user pid=30836 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210276912.556:326): user pid=30938 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210276913.042:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=29793 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210276942.575:328): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)'
>type=USER_ACCT msg=audit(1210276942.578:329): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)'
>type=CRED_ACQ msg=audit(1210276942.579:330): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)'
>type=USER_START msg=audit(1210276942.672:331): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)'
>type=USER_END msg=audit(1210276942.672:332): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)'
>type=USER_CMD msg=audit(1210276942.673:333): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/3 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210276942.679:334): user pid=31058 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)'
>type=USER_ACCT msg=audit(1210280461.663:335): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210280461.672:336): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210280461.673:337): login pid=2629 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16
>type=USER_START msg=audit(1210280461.770:338): user pid=2629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210280461.932:339): user pid=2629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210280461.933:340): user pid=2629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1210282196.499:341): user pid=4510 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210295665.571:342): user pid=4763 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210295670.986:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=30956 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210295826.505:344): user pid=5164 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210296119.500:345): user pid=5798 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210322504.000:346): user pid=6077 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210322508.536:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4897 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210322515.283:348): user pid=6214 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210323662.161:349): user pid=7348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210323662.204:350): user pid=7348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210323662.205:351): login pid=7348 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17
>type=USER_START msg=audit(1210323662.323:352): user pid=7348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210323662.449:353): user pid=7348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210323662.451:354): user pid=7348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210327261.697:355): user pid=10258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210327261.700:356): user pid=10258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210327261.700:357): login pid=10258 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18
>type=USER_START msg=audit(1210327261.761:358): user pid=10258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210327261.814:359): user pid=10258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210327261.814:360): user pid=10258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210330861.843:361): user pid=12873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210330861.846:362): user pid=12873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210330861.846:363): login pid=12873 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19
>type=USER_START msg=audit(1210330861.847:364): user pid=12873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210330861.856:365): user pid=12873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210330861.856:366): user pid=12873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210334461.935:367): user pid=15496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210334461.936:368): user pid=15496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210334461.937:369): login pid=15496 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20
>type=USER_START msg=audit(1210334461.938:370): user pid=15496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210334461.943:371): user pid=15496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210334461.943:372): user pid=15496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210338062.080:373): user pid=18083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210338062.083:374): user pid=18083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210338062.084:375): login pid=18083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21
>type=USER_START msg=audit(1210338062.113:376): user pid=18083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210338062.165:377): user pid=18083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210338062.167:378): user pid=18083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210341661.565:379): user pid=20721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210341661.566:380): user pid=20721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210341661.566:381): login pid=20721 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22
>type=USER_START msg=audit(1210341661.620:382): user pid=20721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210341661.739:383): user pid=20721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210341661.740:384): user pid=20721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210345261.766:385): user pid=23240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210345261.768:386): user pid=23240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210345261.768:387): login pid=23240 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23
>type=USER_START msg=audit(1210345261.770:388): user pid=23240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210345261.777:389): user pid=23240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210345261.778:390): user pid=23240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210348862.153:391): user pid=25867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210348862.161:392): user pid=25867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210348862.161:393): login pid=25867 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24
>type=USER_START msg=audit(1210348862.223:394): user pid=25867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210348862.353:395): user pid=25867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210348862.354:396): user pid=25867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210352461.711:397): user pid=28952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210352461.715:398): user pid=28952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210352461.716:399): login pid=28952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25
>type=USER_START msg=audit(1210352461.754:400): user pid=28952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210352461.805:401): user pid=28952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210352461.806:402): user pid=28952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210356062.073:403): user pid=31645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210356062.076:404): user pid=31645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210356062.077:405): login pid=31645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26
>type=USER_START msg=audit(1210356062.128:406): user pid=31645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210356062.201:407): user pid=31645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210356062.202:408): user pid=31645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210359661.243:409): user pid=1829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210359661.244:410): user pid=1829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210359661.244:411): login pid=1829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27
>type=USER_START msg=audit(1210359661.246:412): user pid=1829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210359661.250:413): user pid=1829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210359661.250:414): user pid=1829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210363261.686:415): user pid=4853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210363261.695:416): user pid=4853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210363261.696:417): login pid=4853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28
>type=USER_START msg=audit(1210363261.734:418): user pid=4853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210363261.920:419): user pid=4853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210363261.920:420): user pid=4853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210366569.608:421): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210366569.614:422): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210366569.717:423): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210366569.811:424): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210366569.812:425): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210366569.812:426): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E302E756C696D2E66697273742E74696D652E72756E2E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530372E312E302E756C696D2E66697273742E74696D652E72756E2E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210366569.815:427): user pid=9896 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210366864.330:428): user pid=10395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210366864.452:429): user pid=10395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210366864.452:430): login pid=10395 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29
>type=USER_START msg=audit(1210366864.871:431): user pid=10395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210366865.000:432): user pid=10395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210366865.000:433): user pid=10395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210367570.891:434): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210367570.894:435): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210367570.943:436): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210367571.078:437): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210367571.078:438): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210367571.092:439): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210367571.103:440): user pid=11152 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210370461.453:441): user pid=13623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210370461.456:442): user pid=13623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210370461.456:443): login pid=13623 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30
>type=USER_START msg=audit(1210370461.749:444): user pid=13623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210370461.890:445): user pid=13623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210370461.890:446): user pid=13623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1210370826.500:447): user pid=14104 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210397629.058:448): auid=500 uid=0 gid=0 ses=1 subj=unconfined_u:system_r:bluetooth_t:s0 pid=31172 comm="hcid" sig=11
>type=USYS_CONFIG msg=audit(1210397629.741:449): user pid=14524 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210397634.428:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=6187 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210397644.636:451): user pid=14632 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210399261.245:452): user pid=16052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210399261.247:453): user pid=16052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210399261.247:454): login pid=16052 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31
>type=USER_START msg=audit(1210399261.249:455): user pid=16052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210399261.254:456): user pid=16052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210399261.254:457): user pid=16052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210402620.519:458): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210402620.521:459): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210402620.578:460): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210402620.579:461): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210402620.579:462): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210402620.579:463): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat/RPMS/i386" cmd=2F62696E2F72706D202D557668206269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E6663392E693338362E72706D206269746C6265652D312E322D312E67697432303038303530372E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210402620.581:464): user pid=18681 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210402709.466:465): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210402709.467:466): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210402709.468:467): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210402709.468:468): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat/RPMS/i386" cmd=2F62696E2F72706D202D557668202D2D666F726365206269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E6663392E693338362E72706D206269746C6265652D312E322D312E67697432303038303530372E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210402709.469:469): user pid=18747 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210402861.420:470): user pid=18946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210402861.423:471): user pid=18946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210402861.423:472): login pid=18946 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32
>type=USER_START msg=audit(1210402861.426:473): user pid=18946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210402861.464:474): user pid=18946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210402861.464:475): user pid=18946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210406461.592:476): user pid=21980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210406461.596:477): user pid=21980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210406461.596:478): login pid=21980 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33
>type=USER_START msg=audit(1210406461.682:479): user pid=21980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210406461.741:480): user pid=21980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210406461.741:481): user pid=21980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210410061.961:482): user pid=25385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210410061.965:483): user pid=25385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210410061.965:484): login pid=25385 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34
>type=USER_START msg=audit(1210410062.018:485): user pid=25385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210410062.043:486): user pid=25385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210410062.044:487): user pid=25385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210413661.704:488): user pid=28568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210413661.713:489): user pid=28568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210413661.713:490): login pid=28568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35
>type=USER_START msg=audit(1210413661.800:491): user pid=28568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210413662.080:492): user pid=28568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210413662.080:493): user pid=28568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210417261.460:494): user pid=928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210417261.463:495): user pid=928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210417261.463:496): login pid=928 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36
>type=USER_START msg=audit(1210417261.613:497): user pid=928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210417261.687:498): user pid=928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210417261.688:499): user pid=928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210420861.714:500): user pid=3907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210420861.717:501): user pid=3907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210420861.717:502): login pid=3907 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37
>type=USER_START msg=audit(1210420861.720:503): user pid=3907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210420861.727:504): user pid=3907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210420861.727:505): user pid=3907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210423883.404:506): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210423883.407:507): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210423883.506:508): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210423883.508:509): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210423883.509:510): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210423883.509:511): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F726365206269746C6265652D2A312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210423883.514:512): user pid=6130 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210423899.390:513): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210423899.391:514): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210423899.391:515): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210423899.391:516): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210423899.393:517): user pid=6144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210424461.756:518): user pid=6588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210424461.759:519): user pid=6588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210424461.759:520): login pid=6588 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38
>type=USER_START msg=audit(1210424461.762:521): user pid=6588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210424461.768:522): user pid=6588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210424461.768:523): user pid=6588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210428061.800:524): user pid=9513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210428061.805:525): user pid=9513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210428061.805:526): login pid=9513 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39
>type=USER_START msg=audit(1210428061.809:527): user pid=9513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210428061.821:528): user pid=9513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210428061.822:529): user pid=9513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210431661.848:530): user pid=12385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210431661.849:531): user pid=12385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210431661.849:532): login pid=12385 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40
>type=USER_START msg=audit(1210431661.851:533): user pid=12385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210431661.855:534): user pid=12385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210431661.855:535): user pid=12385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210435261.965:536): user pid=15152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210435261.967:537): user pid=15152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210435261.967:538): login pid=15152 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41
>type=USER_START msg=audit(1210435261.968:539): user pid=15152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210435261.973:540): user pid=15152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210435261.973:541): user pid=15152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210438861.135:542): user pid=17814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210438861.137:543): user pid=17814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210438861.137:544): login pid=17814 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42
>type=USER_START msg=audit(1210438861.139:545): user pid=17814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210438861.146:546): user pid=17814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210438861.146:547): user pid=17814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210442461.173:548): user pid=20583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210442461.175:549): user pid=20583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210442461.176:550): login pid=20583 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43
>type=USER_START msg=audit(1210442461.178:551): user pid=20583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210442461.185:552): user pid=20583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210442461.185:553): user pid=20583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210446061.211:554): user pid=23237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210446061.214:555): user pid=23237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210446061.215:556): login pid=23237 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44
>type=USER_START msg=audit(1210446061.217:557): user pid=23237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210446061.226:558): user pid=23237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210446061.226:559): user pid=23237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=ANOM_ABEND msg=audit(1210448030.100:560): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=26819 comm="rhythmbox" sig=11
>type=USER_ACCT msg=audit(1210449661.696:561): user pid=26295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210449661.700:562): user pid=26295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210449661.700:563): login pid=26295 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45
>type=USER_START msg=audit(1210449661.738:564): user pid=26295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210449661.790:565): user pid=26295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210449661.790:566): user pid=26295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210453261.921:567): user pid=29351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210453261.924:568): user pid=29351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210453261.925:569): login pid=29351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46
>type=USER_START msg=audit(1210453261.974:570): user pid=29351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210453262.005:571): user pid=29351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210453262.005:572): user pid=29351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210454622.158:573): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=failed)'
>type=USER_AUTH msg=audit(1210454626.825:574): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210454626.827:575): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210454626.869:576): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210454626.889:577): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210454626.890:578): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210454626.890:579): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210454626.892:580): user pid=31871 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_AUTH msg=audit(1210456501.022:581): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210456501.028:582): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210456501.142:583): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210456501.176:584): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210456501.176:585): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210456501.177:586): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210456501.181:587): user pid=3082 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210456861.430:588): user pid=3595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210456861.439:589): user pid=3595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210456861.440:590): login pid=3595 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47
>type=USER_START msg=audit(1210456861.477:591): user pid=3595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210456861.585:592): user pid=3595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210456861.585:593): user pid=3595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210456985.684:594): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210456985.686:595): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210456985.718:596): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210456985.749:597): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210456985.750:598): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210456985.767:599): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210456985.770:600): user pid=3691 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1210457374.500:601): user pid=4385 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210487181.820:602): user pid=4723 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210487186.428:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=14611 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210487190.457:604): user pid=4824 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210489261.248:605): user pid=6775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210489261.251:606): user pid=6775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210489261.251:607): login pid=6775 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48
>type=USER_START msg=audit(1210489261.290:608): user pid=6775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210489261.336:609): user pid=6775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210489261.336:610): user pid=6775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210492861.364:611): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210492861.365:612): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210492861.366:613): login pid=9298 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49
>type=USER_START msg=audit(1210492861.367:614): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210492861.371:615): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210492861.371:616): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210496461.399:617): user pid=11919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210496461.402:618): user pid=11919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210496461.403:619): login pid=11919 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50
>type=USER_START msg=audit(1210496461.404:620): user pid=11919 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210496461.409:621): user pid=11919 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210496461.409:622): user pid=11919 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210500061.438:623): user pid=14436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210500061.440:624): user pid=14436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210500061.441:625): login pid=14436 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51
>type=USER_START msg=audit(1210500061.444:626): user pid=14436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210500061.448:627): user pid=14436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210500061.448:628): user pid=14436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210503661.474:629): user pid=17056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210503661.476:630): user pid=17056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210503661.477:631): login pid=17056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52
>type=USER_START msg=audit(1210503661.479:632): user pid=17056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210503661.485:633): user pid=17056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210503661.485:634): user pid=17056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210507261.511:635): user pid=19627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210507261.514:636): user pid=19627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210507261.514:637): login pid=19627 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53
>type=USER_START msg=audit(1210507261.516:638): user pid=19627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210507261.524:639): user pid=19627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210507261.524:640): user pid=19627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210510862.367:641): user pid=22941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210510862.376:642): user pid=22941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210510862.377:643): login pid=22941 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54
>type=USER_START msg=audit(1210510862.518:644): user pid=22941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210510862.637:645): user pid=22941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210510862.638:646): user pid=22941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210514461.829:647): user pid=25940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210514461.832:648): user pid=25940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210514461.833:649): login pid=25940 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55
>type=USER_START msg=audit(1210514461.894:650): user pid=25940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210514461.928:651): user pid=25940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210514461.929:652): user pid=25940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210518061.955:653): user pid=28579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210518061.957:654): user pid=28579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210518061.957:655): login pid=28579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56
>type=USER_START msg=audit(1210518061.959:656): user pid=28579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210518061.965:657): user pid=28579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210518061.965:658): user pid=28579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210521661.987:659): user pid=31323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210521661.987:660): user pid=31323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210521661.987:661): login pid=31323 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57
>type=USER_START msg=audit(1210521661.989:662): user pid=31323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210521661.992:663): user pid=31323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210521661.992:664): user pid=31323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210525261.106:665): user pid=1512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210525261.108:666): user pid=1512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210525261.109:667): login pid=1512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58
>type=USER_START msg=audit(1210525261.130:668): user pid=1512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210525261.133:669): user pid=1512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210525261.133:670): user pid=1512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210528861.164:671): user pid=4477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210528861.165:672): user pid=4477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210528861.165:673): login pid=4477 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59
>type=USER_START msg=audit(1210528861.168:674): user pid=4477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210528861.172:675): user pid=4477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210528861.172:676): user pid=4477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210532461.197:677): user pid=7132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210532461.199:678): user pid=7132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210532461.199:679): login pid=7132 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60
>type=USER_START msg=audit(1210532461.202:680): user pid=7132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210532461.207:681): user pid=7132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210532461.208:682): user pid=7132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210536061.306:683): user pid=10065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210536061.308:684): user pid=10065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210536061.308:685): login pid=10065 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61
>type=USER_START msg=audit(1210536061.309:686): user pid=10065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210536061.314:687): user pid=10065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210536061.315:688): user pid=10065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210539661.494:689): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210539661.498:690): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210539661.498:691): login pid=13125 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62
>type=USER_START msg=audit(1210539661.568:692): user pid=13125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210539661.595:693): user pid=13125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210539661.595:694): user pid=13125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210543262.065:695): user pid=16684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210543262.073:696): user pid=16684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210543262.073:697): login pid=16684 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63
>type=USER_START msg=audit(1210543262.134:698): user pid=16684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210543262.197:699): user pid=16684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210543262.198:700): user pid=16684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210546861.333:701): user pid=20099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210546861.335:702): user pid=20099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210546861.335:703): login pid=20099 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64
>type=USER_START msg=audit(1210546861.366:704): user pid=20099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210546861.407:705): user pid=20099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210546861.407:706): user pid=20099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USYS_CONFIG msg=audit(1210546962.500:707): user pid=20361 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210547334.755:708): user pid=20642 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210547335.640:709): auid=500 uid=0 gid=0 ses=1 subj=unconfined_u:system_r:NetworkManager_t:s0 pid=4348 comm="NetworkManager" sig=6
>type=ANOM_ABEND msg=audit(1210547339.560:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4802 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210547340.701:711): user pid=20742 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210547371.539:712): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210547371.544:713): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210547371.545:714): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210547371.548:715): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210547371.549:716): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210547371.549:717): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210547371.551:718): user pid=20805 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USYS_CONFIG msg=audit(1210548243.519:719): user pid=22370 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210570746.899:720): user pid=22603 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210570751.607:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=20850 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210570798.157:722): user pid=22780 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210571804.082:723): user pid=23840 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210571804.084:724): user pid=23840 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210571812.123:725): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210571812.187:726): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210571812.188:727): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210571812.188:728): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=2F686F6D652F6D6174656A2F506F6463617374732F74686973205745454B20696E2054454348202D204F67672045646974696F6E cmd=2F7362696E2F7365727669636520626C7565746F6F74682072657374617274 (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210571812.194:729): user pid=23859 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210572061.617:730): user pid=24101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210572061.626:731): user pid=24101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210572061.627:732): login pid=24101 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65
>type=USER_START msg=audit(1210572061.629:733): user pid=24101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210572061.683:734): user pid=24101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210572061.684:735): user pid=24101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210572448.313:736): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210572448.600:737): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210572569.145:738): user pid=24536 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210572569.149:739): user pid=24536 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210572569.158:740): user pid=24536 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210572569.206:741): login pid=24536 uid=0 old auid=4294967295 new auid=504 old ses=4294967295 new ses=66
>type=USER_ROLE_CHANGE msg=audit(1210572569.343:742): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210572570.038:743): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210572570.387:744): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210573990.605:745): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210574004.185:746): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210574023.411:747): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210574023.416:748): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210574023.488:749): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210574023.492:750): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210574023.492:751): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210574023.492:752): user pid=26263 uid=500 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1210574154.509:753): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1210574154.539:754): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_AUTH msg=audit(1210574341.859:755): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210574341.861:756): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210574341.862:757): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210574341.863:758): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210574341.863:759): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210574341.863:760): user pid=26645 uid=500 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1210575661.805:761): user pid=28137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210575661.807:762): user pid=28137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210575661.807:763): login pid=28137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67
>type=USER_START msg=audit(1210575661.812:764): user pid=28137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210575661.835:765): user pid=28137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210575661.835:766): user pid=28137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210579261.854:767): user pid=30731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210579261.855:768): user pid=30731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210579261.855:769): login pid=30731 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68
>type=USER_START msg=audit(1210579261.856:770): user pid=30731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210579261.861:771): user pid=30731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210579261.861:772): user pid=30731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210582861.972:773): user pid=1038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210582861.974:774): user pid=1038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210582861.974:775): login pid=1038 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69
>type=USER_START msg=audit(1210582861.978:776): user pid=1038 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210582861.983:777): user pid=1038 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210582861.983:778): user pid=1038 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210586462.005:779): user pid=3847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210586462.006:780): user pid=3847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210586462.006:781): login pid=3847 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70
>type=USER_START msg=audit(1210586462.007:782): user pid=3847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210586462.010:783): user pid=3847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210586462.011:784): user pid=3847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210590061.029:785): user pid=6482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210590061.030:786): user pid=6482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210590061.030:787): login pid=6482 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71
>type=USER_START msg=audit(1210590061.031:788): user pid=6482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210590061.034:789): user pid=6482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210590061.035:790): user pid=6482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210593661.062:791): user pid=9151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210593661.063:792): user pid=9151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210593661.064:793): login pid=9151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72
>type=USER_START msg=audit(1210593661.065:794): user pid=9151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210593661.069:795): user pid=9151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210593661.069:796): user pid=9151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210597261.086:797): user pid=11915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210597261.086:798): user pid=11915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210597261.086:799): login pid=11915 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73
>type=USER_START msg=audit(1210597261.089:800): user pid=11915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210597261.093:801): user pid=11915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210597261.093:802): user pid=11915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210600861.116:803): user pid=14679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210600861.119:804): user pid=14679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210600861.120:805): login pid=14679 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74
>type=USER_START msg=audit(1210600861.123:806): user pid=14679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210600861.128:807): user pid=14679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210600861.128:808): user pid=14679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210604461.150:809): user pid=17215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210604461.151:810): user pid=17215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210604461.152:811): login pid=17215 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75
>type=USER_START msg=audit(1210604461.153:812): user pid=17215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210604461.159:813): user pid=17215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210604461.159:814): user pid=17215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210608061.178:815): user pid=19984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210608061.179:816): user pid=19984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210608061.179:817): login pid=19984 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76
>type=USER_START msg=audit(1210608061.180:818): user pid=19984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210608061.184:819): user pid=19984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210608061.184:820): user pid=19984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210611661.448:821): user pid=22744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210611661.449:822): user pid=22744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210611661.449:823): login pid=22744 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77
>type=USER_START msg=audit(1210611661.462:824): user pid=22744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210611661.466:825): user pid=22744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210611661.466:826): user pid=22744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210615261.489:827): user pid=25412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210615261.490:828): user pid=25412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210615261.490:829): login pid=25412 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78
>type=USER_START msg=audit(1210615261.491:830): user pid=25412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210615261.495:831): user pid=25412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210615261.495:832): user pid=25412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210618861.516:833): user pid=28093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210618861.518:834): user pid=28093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210618861.518:835): login pid=28093 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79
>type=USER_START msg=audit(1210618861.519:836): user pid=28093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210618861.523:837): user pid=28093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210618861.523:838): user pid=28093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210622417.573:839): user pid=31037 uid=504 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210622417.575:840): user pid=31037 uid=504 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210622461.549:841): user pid=31212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210622461.550:842): user pid=31212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210622461.551:843): login pid=31212 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80
>type=USER_START msg=audit(1210622461.552:844): user pid=31212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210622461.558:845): user pid=31212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210622461.558:846): user pid=31212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210622680.278:847): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)'
>type=USER_AUTH msg=audit(1210622683.977:848): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210622683.982:849): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210622684.084:850): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210622684.092:851): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210622684.092:852): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210622684.093:853): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)'
>type=ANOM_ABEND msg=audit(1210624113.413:854): auid=504 uid=504 gid=504 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1823 comm="npviewer.bin" sig=11
>type=CRED_DISP msg=audit(1210625632.825:855): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210625632.980:856): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210625648.465:857): user pid=3252 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210625648.468:858): user pid=3252 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210625648.479:859): user pid=3252 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210625648.524:860): login pid=3252 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=81
>type=USER_ROLE_CHANGE msg=audit(1210625648.643:861): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210625652.184:862): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210625652.398:863): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=CRED_DISP msg=audit(1210625744.216:864): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_END msg=audit(1210625744.267:865): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1210625755.644:866): user pid=3996 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210625755.647:867): user pid=3996 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210625755.658:868): user pid=3996 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210625755.708:869): login pid=3996 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=82
>type=USER_ROLE_CHANGE msg=audit(1210625755.731:870): user pid=3996 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210625755.752:871): user pid=3996 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210625755.819:872): user pid=3996 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210625784.435:873): user pid=26459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1210625784.439:874): user pid=26459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=LOGIN msg=audit(1210625784.440:875): login pid=26459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83
>type=USER_ROLE_CHANGE msg=audit(1210625784.452:876): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1210625784.465:877): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1210625784.466:878): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1210625784.469:879): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_DISP msg=audit(1210625797.997:880): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_END msg=audit(1210625798.000:881): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=ANOM_ABEND msg=audit(1210625914.333:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2257 comm="iscsid" sig=11
>type=DAEMON_END msg=audit(1210625918.203:530): auditd normal halt, sending auid=0 pid=5166 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210625980.181:287): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=2064 res=success
>type=CONFIG_CHANGE msg=audit(1210625980.332:3): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210626030.381:4): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210626030.385:5): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210626030.413:6): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210626030.445:7): login pid=2776 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210626030.477:8): user pid=2776 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210626034.339:9): user pid=2776 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210626034.408:10): user pid=2776 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_ACCT msg=audit(1210626062.104:11): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210626062.107:12): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210626062.108:13): login pid=3256 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210626062.111:14): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210626062.558:15): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210626062.558:16): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210629661.589:17): user pid=6441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210629661.593:18): user pid=6441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210629661.593:19): login pid=6441 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3
>type=USER_START msg=audit(1210629661.595:20): user pid=6441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210629661.600:21): user pid=6441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210629661.600:22): user pid=6441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210630117.220:23): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210630117.226:24): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210630117.260:25): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210630117.287:26): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210630117.288:27): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210630117.288:28): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F72706D202D557668202D2D666F726365206269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D206269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210630117.293:29): user pid=9506 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_AUTH msg=audit(1210630669.988:30): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=USER_ACCT msg=audit(1210630669.993:31): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=CRED_ACQ msg=audit(1210630670.068:32): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_START msg=audit(1210630670.122:33): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_END msg=audit(1210630670.122:34): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)'
>type=USER_CMD msg=audit(1210630670.123:35): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=2F7573722F62696E2F79756D20636C65616E206D65746164617461 (terminal=pts/0 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210630670.128:36): user pid=15042 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)'
>type=ANOM_ABEND msg=audit(1210632543.305:37): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=16947 comm="evolution-data-" sig=6
>type=USER_ACCT msg=audit(1210633261.936:38): user pid=17816 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210633261.938:39): user pid=17816 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210633261.939:40): login pid=17816 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4
>type=USER_START msg=audit(1210633261.990:41): user pid=17816 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210633262.098:42): user pid=17816 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210633262.099:43): user pid=17816 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_ACCT msg=audit(1210636861.129:44): user pid=21482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210636861.131:45): user pid=21482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210636861.131:46): login pid=21482 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5
>type=USER_START msg=audit(1210636861.135:47): user pid=21482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210636861.140:48): user pid=21482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210636861.140:49): user pid=21482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=AVC msg=audit(1210637101.838:50): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418184 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.838:50): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.839:51): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418187 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.839:51): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.841:52): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418304 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.841:52): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.842:53): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418402 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.842:53): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.842:54): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418405 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.842:54): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.842:55): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418408 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.842:55): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.842:56): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418411 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.842:56): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.842:57): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418414 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.842:57): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.842:58): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418417 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.842:58): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.843:59): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418420 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.843:59): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.843:60): avc:  denied  { sys_nice } for  pid=22221 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1210637101.843:60): arch=40000003 syscall=3 success=yes exit=194 a0=5 a1=5ba960 a2=3ff a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.843:61): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418423 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.843:61): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.843:62): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418426 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.843:62): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.843:63): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418429 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.843:63): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.844:64): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418453 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.844:64): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.844:65): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418459 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.844:65): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.844:66): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418462 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.844:66): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.844:67): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418465 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.844:67): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.844:68): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418471 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.844:68): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.844:69): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418474 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.844:69): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.845:70): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418477 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.845:70): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.845:71): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418480 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.845:71): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.845:72): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418483 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.845:72): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.845:73): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418489 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.845:73): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.845:74): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418492 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.845:74): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.845:75): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418495 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.845:75): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.846:76): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418501 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.846:76): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.846:77): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418504 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.846:77): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.846:78): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418507 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.846:78): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.846:79): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418525 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.846:79): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.847:80): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418528 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.847:80): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.847:81): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418534 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.847:81): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.847:82): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418540 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.847:82): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.847:83): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418543 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.847:83): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.847:84): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418546 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.847:84): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.848:85): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418549 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.848:85): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.848:86): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418570 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.848:86): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.848:87): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418579 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.848:87): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.849:88): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418646 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.849:88): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.851:89): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418689 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.851:89): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.851:90): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418716 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.851:90): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.853:91): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418781 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vpnc_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.853:91): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.853:92): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418798 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.853:92): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.854:93): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=418812 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file
>type=SYSCALL msg=audit(1210637101.854:93): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210637101.854:94): avc:  denied  { read } for  pid=22221 comm="ps" name="stat" dev=proc ino=419111 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file
>type=SYSCALL msg=audit(1210637101.854:94): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null)
>type=USYS_CONFIG msg=audit(1210637102.500:95): user pid=22176 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=USYS_CONFIG msg=audit(1210665637.678:96): user pid=22426 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)'
>type=ANOM_ABEND msg=audit(1210665644.095:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=2575 comm="nm-system-setti" sig=6
>type=USER_AUTH msg=audit(1210665651.475:98): user pid=22622 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210665686.120:99): user pid=22729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210665686.123:100): user pid=22729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210665686.123:101): login pid=22729 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6
>type=USER_START msg=audit(1210665686.127:102): user pid=22729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210665686.139:103): user pid=22729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210665686.139:104): user pid=22729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210665708.249:105): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=USER_ACCT msg=audit(1210665708.252:106): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210665708.275:107): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_START msg=audit(1210665708.278:108): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_END msg=audit(1210665708.279:109): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)'
>type=USER_CMD msg=audit(1210665708.280:110): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)'
>type=USER_ROLE_CHANGE msg=audit(1210665708.328:111): user pid=22782 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'

Actions: View

Attachments on bug 446175: 305212