Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 305212 Details for
Bug 446175
SELinux is preventing ps (dhcpc_t) "read" to ./stat (kernel_t).
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
/var/log/audit/audit.log
audit.log (text/plain), 306.00 KB, created by
Matěj Cepl
on 2008-05-13 08:07:30 UTC
(
hide
)
Description:
/var/log/audit/audit.log
Filename:
MIME Type:
Creator:
Matěj Cepl
Created:
2008-05-13 08:07:30 UTC
Size:
306.00 KB
patch
obsolete
>type=DAEMON_ROTATE msg=audit(1210028465.918:9413): auditd sending auid=500 pid=4843 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 >type=USYS_CONFIG msg=audit(1210029037.500:75): user pid=5728 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210067335.574:76): user pid=5909 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210067340.541:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4459 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210067344.143:78): user pid=6068 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210067394.938:79): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=6271 comm="bitlbee" sig=11 >type=USER_ACCT msg=audit(1210068061.228:80): user pid=6970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210068061.231:81): user pid=6970 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210068061.231:82): login pid=6970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1210068061.234:83): user pid=6970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210068061.245:84): user pid=6970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210068061.245:85): user pid=6970 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210068729.127:86): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210068729.133:87): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210068729.136:88): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210068729.138:89): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210068729.139:90): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210068729.140:91): user pid=9067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530362E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530362E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210068729.145:92): user pid=9076 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=AVC msg=audit(1210069308.871:93): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=6872 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.871:93): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.873:94): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=6875 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.873:94): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.874:95): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=6998 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.874:95): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.875:96): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7463 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.875:96): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.875:97): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7466 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.875:97): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.875:98): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7469 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.875:98): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.876:99): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7472 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.876:99): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.876:100): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7475 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.876:100): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.876:101): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7860 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.876:101): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.876:102): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7862 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.876:102): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.876:103): avc: denied { sys_nice } for pid=10085 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability >type=SYSCALL msg=audit(1210069308.876:103): arch=40000003 syscall=3 success=yes exit=195 a0=5 a1=ac2960 a2=3ff a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.876:104): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7864 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.876:104): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.877:105): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7866 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.877:105): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.877:106): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7868 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.877:106): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.877:107): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7892 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.877:107): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.877:108): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=7974 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.877:108): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.878:109): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=8220 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.878:109): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.878:110): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=8223 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.878:110): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.878:111): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=8229 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.878:111): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.878:112): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=8232 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.878:112): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.878:113): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9695 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.878:113): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.879:114): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9698 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.879:114): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.879:115): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9701 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.879:115): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.879:116): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9707 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.879:116): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.879:117): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9710 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.879:117): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.879:118): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9713 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.879:118): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.879:119): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9719 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.879:119): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.880:120): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9722 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.880:120): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.880:121): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9725 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.880:121): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.880:122): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9743 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_crond_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.880:122): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.880:123): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9748 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.880:123): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.881:124): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=9788 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.881:124): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.881:125): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24074 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.881:125): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.881:126): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24076 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.881:126): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.881:127): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24077 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.881:127): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.881:128): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24078 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.881:128): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.882:129): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24079 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.882:129): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.882:130): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=10747 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.882:130): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.882:131): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24091 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.882:131): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.883:132): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24097 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.883:132): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.884:133): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24116 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.884:133): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.886:134): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=24143 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.886:134): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.888:135): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=125164 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vpnc_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.888:135): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.888:136): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=125170 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.888:136): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.888:137): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=125179 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210069308.888:137): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210069308.889:138): avc: denied { read } for pid=10085 comm="ps" name="stat" dev=proc ino=125268 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file >type=SYSCALL msg=audit(1210069308.889:138): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=10081 pid=10085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=USYS_CONFIG msg=audit(1210069309.500:139): user pid=10033 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210071548.000:140): user pid=10315 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210071552.345:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=6044 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210071554.166:142): user pid=10440 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210071640.500:143): user pid=10724 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210085967.700:144): user pid=10905 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210085971.049:145): user pid=11038 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210085972.624:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=10418 comm="nm-system-setti" sig=6 >type=USER_ACCT msg=audit(1210086061.046:147): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210086061.049:148): user pid=11211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210086061.050:149): login pid=11211 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1210086061.057:150): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210086061.069:151): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210086061.069:152): user pid=11211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210087015.499:153): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210087015.502:154): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210087015.503:155): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210087015.504:156): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210087015.504:157): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210087015.505:158): user pid=12601 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6570697068616E792D6465627567696E666F2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D646576656C2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210087015.507:159): user pid=12611 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_AUTH msg=audit(1210087429.420:160): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210087434.690:161): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210087434.697:162): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210087434.737:163): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210087434.790:164): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210087434.791:165): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210087434.792:166): user pid=28785 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6570697068616E792D6465627567696E666F2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D646576656C2D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D2052504D532F693338362F6570697068616E792D322E32322E312E312D312E302E7765626B69742E312E6663392E693338362E72706D (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210087434.797:167): user pid=28801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_AUTH msg=audit(1210087789.711:168): user pid=29184 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210087805.326:169): user pid=29184 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210087816.813:170): user pid=29184 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210087905.933:171): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210087905.938:172): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210087905.977:173): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210087905.998:174): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210087905.998:175): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210087905.998:176): user pid=29304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F7573722F62696E2F79756D2072656D6F7665206570697068616E792A (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210087906.005:177): user pid=29314 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_CHAUTHTOK msg=audit(1210088535.314:178): user pid=30238 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1210088535.314:179): user pid=30238 uid=0 auid=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=ANOM_ABEND msg=audit(1210088952.702:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2247 comm="iscsid" sig=11 >type=DAEMON_END msg=audit(1210088955.551:9414): auditd normal halt, sending auid=0 pid=11177 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210089016.358:529): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=2070 res=success >type=CONFIG_CHANGE msg=audit(1210089016.499:3): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_AUTH msg=audit(1210089063.390:4): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210089063.392:5): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210089063.436:6): user pid=2802 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210089063.471:7): login pid=2802 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210089063.510:8): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210089067.439:9): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210089067.447:10): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=AVC msg=audit(1210089356.474:11): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=1752 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.474:11): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.475:12): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=1755 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.475:12): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.478:13): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=4758 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.478:13): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:14): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7214 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.479:14): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:15): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7217 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.479:15): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:16): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7220 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.479:16): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:17): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7223 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.479:17): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:18): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7226 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.479:18): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:19): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7610 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.479:19): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.479:20): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7612 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.479:20): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.480:21): avc: denied { sys_nice } for pid=3976 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability >type=SYSCALL msg=audit(1210089356.480:21): arch=40000003 syscall=3 success=yes exit=194 a0=5 a1=ac2960 a2=3ff a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.480:22): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7614 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.480:22): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.480:23): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7616 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.480:23): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.480:24): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7618 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.480:24): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.481:25): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7642 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.481:25): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.481:26): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7725 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.481:26): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.481:27): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7969 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.481:27): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.481:28): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7972 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.481:28): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.481:29): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7978 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.481:29): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.482:30): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=7981 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.482:30): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.482:31): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9094 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.482:31): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.482:32): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9097 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.482:32): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.482:33): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9100 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.482:33): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.482:34): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9106 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.482:34): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.482:35): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9109 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.482:35): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.483:36): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9112 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.483:36): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.483:37): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9118 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.483:37): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.483:38): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9121 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.483:38): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.483:39): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9124 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.483:39): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.484:40): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9142 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_crond_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.484:40): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.484:41): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9145 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.484:41): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.484:42): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=9154 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.484:42): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.484:43): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30699 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.484:43): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.484:44): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30705 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.484:44): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.484:45): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30708 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.484:45): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.485:46): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30711 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.485:46): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.485:47): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30714 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.485:47): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.485:48): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=10158 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.485:48): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.486:49): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30745 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.486:49): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.486:50): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30773 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.486:50): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.487:51): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30812 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.487:51): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.488:52): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30836 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.488:52): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.488:53): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30850 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.488:53): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.489:54): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30892 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vpnc_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.489:54): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.490:55): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30903 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210089356.490:55): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210089356.490:56): avc: denied { read } for pid=3976 comm="ps" name="stat" dev=proc ino=30959 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file >type=SYSCALL msg=audit(1210089356.490:56): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=3975 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=USYS_CONFIG msg=audit(1210089357.500:57): user pid=3925 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210105922.986:58): user pid=4124 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210105923.432:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0 pid=2575 comm="NetworkManager" sig=6 >type=ANOM_ABEND msg=audit(1210105927.411:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=2585 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210105927.494:61): user pid=4251 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210105951.767:62): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210105951.772:63): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210105951.774:64): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210105951.778:65): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210105951.779:66): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210105951.781:67): user pid=4304 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210105951.783:68): user pid=4308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210106036.820:69): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210106036.824:70): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210106036.825:71): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210106036.825:72): user pid=4479 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210106036.828:73): user pid=4480 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_AUTH msg=audit(1210106057.689:74): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210106057.695:75): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210106057.696:76): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210106057.698:77): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210106057.699:78): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210106057.699:79): user pid=4570 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210106057.703:80): user pid=4612 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210106232.627:81): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210106232.627:82): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210106232.628:83): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210106232.628:84): user pid=5977 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530362E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530362E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210106232.630:85): user pid=5978 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210106277.449:86): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210106277.450:87): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210106277.451:88): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210106277.451:89): user pid=6009 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530362E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530362E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210106277.453:90): user pid=6010 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=ANOM_ABEND msg=audit(1210106373.170:91): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=6072 comm="bitlbee" sig=8 >type=USER_ACCT msg=audit(1210107661.909:92): user pid=7392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210107661.912:93): user pid=7392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210107661.913:94): login pid=7392 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1210107661.918:95): user pid=7392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210107661.992:96): user pid=7392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210107661.992:97): user pid=7392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210110210.369:98): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210110210.372:99): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210110210.577:100): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210110210.653:101): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210110210.654:102): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210110210.671:103): user pid=26430 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210110210.675:104): user pid=26626 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=ANOM_ABEND msg=audit(1210110333.067:105): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=24110 comm="bitlbee" sig=8 >type=ANOM_ABEND msg=audit(1210110484.425:106): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=11787 comm="bitlbee" sig=8 >type=AVC msg=audit(1210110576.544:107): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209299 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.544:107): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.544:108): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209302 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.544:108): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.546:109): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209395 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.546:109): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.547:110): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209428 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.547:110): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.547:111): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209431 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.547:111): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.547:112): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209434 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.547:112): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.547:113): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209437 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.547:113): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.547:114): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209440 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.547:114): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.547:115): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209443 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.547:115): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.548:116): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209446 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.548:116): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.548:117): avc: denied { sys_nice } for pid=24472 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability >type=SYSCALL msg=audit(1210110576.548:117): arch=40000003 syscall=3 success=yes exit=194 a0=5 a1=ac2960 a2=3ff a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.548:118): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209449 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.548:118): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.548:119): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209452 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.548:119): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.548:120): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209516 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.548:120): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.549:121): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209537 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.549:121): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.549:122): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209543 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.549:122): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.549:123): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209546 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.549:123): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.549:124): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209549 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.549:124): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.549:125): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209555 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.549:125): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.550:126): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209558 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.550:126): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.550:127): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209561 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.550:127): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.550:128): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209564 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.550:128): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.550:129): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209567 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.550:129): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.550:130): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209573 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.550:130): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.551:131): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209576 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.551:131): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.551:132): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209579 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.551:132): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.551:133): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209585 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.551:133): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.551:134): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209588 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.551:134): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.551:135): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209591 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.551:135): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.552:136): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209610 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_crond_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.552:136): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.552:137): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209613 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.552:137): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.552:138): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209616 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.552:138): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.552:139): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209622 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.552:139): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.552:140): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209625 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.552:140): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.553:141): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209628 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.553:141): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.553:142): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209631 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.553:142): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.553:143): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209652 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.553:143): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.554:144): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209661 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.554:144): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.554:145): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209676 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.554:145): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.555:146): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209776 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.555:146): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.556:147): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209806 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.556:147): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.558:148): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209902 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:NetworkManager_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.558:148): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.558:149): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=209914 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:vpnc_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.558:149): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.559:150): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=234109 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.559:150): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.559:151): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=234118 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210110576.559:151): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210110576.560:152): avc: denied { read } for pid=24472 comm="ps" name="stat" dev=proc ino=234434 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file >type=SYSCALL msg=audit(1210110576.560:152): arch=40000003 syscall=5 success=yes exit=5 a0=ac2900 a1=0 a2=0 a3=ac2900 items=0 ppid=24471 pid=24472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=USYS_CONFIG msg=audit(1210110577.500:153): user pid=24445 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210111651.502:154): user pid=24665 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210111656.869:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4353 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210111670.355:156): user pid=24867 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210112382.499:157): user pid=25808 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210177779.654:158): user pid=25983 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210177784.555:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=24836 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210177788.207:160): user pid=26141 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210177847.253:161): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210177847.258:162): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210177847.259:163): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210177847.262:164): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210177847.263:165): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210177847.264:166): user pid=26324 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210177847.269:167): user pid=26332 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=ANOM_ABEND msg=audit(1210177878.272:168): auid=4294967295 uid=496 gid=495 ses=4294967295 subj=system_u:system_r:bitlbee_t:s0-s0:c0.c1023 pid=26374 comm="bitlbee" sig=11 >type=USER_AUTH msg=audit(1210178179.495:169): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210178179.510:170): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210178179.512:171): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210178179.521:172): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210178179.521:173): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210178179.522:174): user pid=27986 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530372E312E6663392E693338362E72706D (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210178179.524:175): user pid=27994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210178399.455:176): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210178399.462:177): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210178399.463:178): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210178399.465:179): user pid=28239 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210178399.473:180): user pid=28240 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210179661.756:181): user pid=29814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210179661.759:182): user pid=29814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210179661.760:183): login pid=29814 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1210179661.845:184): user pid=29814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210179661.917:185): user pid=29814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210179661.917:186): user pid=29814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210183262.195:187): user pid=32710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210183262.199:188): user pid=32710 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210183262.199:189): login pid=32710 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1210183262.303:190): user pid=32710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210183262.382:191): user pid=32710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210183262.383:192): user pid=32710 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210183705.769:193): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210183705.774:194): user pid=2635 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210183705.775:195): login pid=2635 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5 >type=USER_ROLE_CHANGE msg=audit(1210183705.999:196): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210183706.056:197): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210183706.298:198): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210183706.299:199): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210183787.830:200): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/tty1 res=success)' >type=USER_ACCT msg=audit(1210183787.836:201): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/tty1 res=success)' >type=CRED_ACQ msg=audit(1210183787.870:202): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/tty1 res=success)' >type=USER_START msg=audit(1210183787.872:203): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/tty1 res=success)' >type=USER_END msg=audit(1210183787.872:204): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/tty1 res=success)' >type=USER_CMD msg=audit(1210183787.873:205): user pid=760 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F6465627567696E666F2D696E7374616C6C206D657461636974792E69333836 (terminal=tty1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210183787.878:206): user pid=768 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/tty1 res=success)' >type=USER_ACCT msg=audit(1210186861.844:207): user pid=4122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210186861.846:208): user pid=4122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210186861.846:209): login pid=4122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1210186861.930:210): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210186862.116:211): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210186862.116:212): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210187979.358:213): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210187979.363:214): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210187979.448:215): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210187979.450:216): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210187979.451:217): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210187979.452:218): user pid=5057 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D646F776E6C6F61646572202D2D736F75726365207468756E64657262697264 (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210187979.456:219): user pid=5067 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210190461.708:220): user pid=27510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210190461.717:221): user pid=27510 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210190461.718:222): login pid=27510 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_START msg=audit(1210190461.812:223): user pid=27510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210190462.054:224): user pid=27510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210190462.054:225): user pid=27510 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210192534.136:226): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/2 res=success)' >type=USER_ACCT msg=audit(1210192534.142:227): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/2 res=success)' >type=CRED_ACQ msg=audit(1210192534.327:228): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/2 res=success)' >type=USER_START msg=audit(1210192534.437:229): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/2 res=success)' >type=USER_END msg=audit(1210192534.438:230): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/2 res=success)' >type=USER_CMD msg=audit(1210192534.439:231): user pid=25836 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F7468756E646572626972642D6465627567696E666F2D322E302E302E31342D312E302E6D63494D41502E312E6663392E693338362E72706D2052504D532F693338362F7468756E646572626972642D322E302E302E31342D312E302E6D63494D41502E312E6663392E693338362E72706D (terminal=pts/2 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210192534.442:232): user pid=25844 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/2 res=success)' >type=USER_ACCT msg=audit(1210194061.838:233): user pid=28354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210194061.949:234): user pid=28354 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210194061.950:235): login pid=28354 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_START msg=audit(1210194062.068:236): user pid=28354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210194062.205:237): user pid=28354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210194062.206:238): user pid=28354 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210197661.357:239): user pid=1186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210197661.360:240): user pid=1186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210197661.361:241): login pid=1186 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_START msg=audit(1210197661.410:242): user pid=1186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210197661.474:243): user pid=1186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210197661.475:244): user pid=1186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210201261.857:245): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210201261.897:246): user pid=4429 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210201261.897:247): login pid=4429 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1210201261.936:248): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210201262.035:249): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210201262.035:250): user pid=4429 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210204788.500:251): user pid=7540 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210241105.254:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:bluetooth_t:s0 pid=2298 comm="hcid" sig=6 >type=USYS_CONFIG msg=audit(1210241103.634:253): user pid=7818 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210241108.664:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=26118 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210241110.914:255): user pid=7933 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210244461.750:256): user pid=11144 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210244461.754:257): user pid=11144 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210244461.754:258): login pid=11144 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_START msg=audit(1210244461.803:259): user pid=11144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210244461.867:260): user pid=11144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210244461.867:261): user pid=11144 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210247039.963:262): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210247039.969:263): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210247040.062:264): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210247040.064:265): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210247040.065:266): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210247040.066:267): user pid=13214 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D206C697374202A6A736F6E2A (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210247040.070:268): user pid=13222 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_AUTH msg=audit(1210247702.321:269): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210247702.323:270): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210247702.518:271): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210247702.549:272): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210247702.550:273): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210247702.550:274): user pid=14045 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C20707974686F6E2D64656D6A736F6E2E6E6F61726368 (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210247702.555:275): user pid=14053 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210248061.407:276): user pid=14593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210248061.416:277): user pid=14593 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210248061.416:278): login pid=14593 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_START msg=audit(1210248061.523:279): user pid=14593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210248061.616:280): user pid=14593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210248061.616:281): user pid=14593 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210251503.871:282): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210251503.876:283): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210251503.941:284): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210251503.972:285): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210251503.972:286): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210251503.974:287): user pid=17308 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D206C697374202A6A736F6E2A (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210251503.979:288): user pid=17316 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210251661.895:289): user pid=17571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210251661.900:290): user pid=17571 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210251661.900:291): login pid=17571 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_START msg=audit(1210251661.949:292): user pid=17571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210251662.046:293): user pid=17571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210251662.046:294): user pid=17571 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210251686.454:295): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210251686.456:296): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210251686.456:297): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210251686.457:298): user pid=17594 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C20707974686F6E2D73696D706C656A736F6E (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210251686.461:299): user pid=17595 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=ANOM_ABEND msg=audit(1210254116.225:300): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=21567 comm="evolution" sig=11 >type=USER_ACCT msg=audit(1210255261.710:301): user pid=22815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210255261.719:302): user pid=22815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210255261.720:303): login pid=22815 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_START msg=audit(1210255261.790:304): user pid=22815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210255261.924:305): user pid=22815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210255261.925:306): user pid=22815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210255517.840:307): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=USER_ACCT msg=audit(1210255517.843:308): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=CRED_ACQ msg=audit(1210255518.071:309): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_START msg=audit(1210255518.072:310): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_END msg=audit(1210255518.073:311): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_CMD msg=audit(1210255518.073:312): user pid=23063 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd="/usr/bin/mailq" (terminal=pts/3 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210255518.078:313): user pid=23071 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=USER_ACCT msg=audit(1210258862.288:314): user pid=25977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210258862.292:315): user pid=25977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210258862.292:316): login pid=25977 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_START msg=audit(1210258862.398:317): user pid=25977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210258862.539:318): user pid=25977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210258862.540:319): user pid=25977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210262398.499:320): user pid=29434 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210264181.581:321): user pid=29659 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210264187.880:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=7923 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210264190.152:323): user pid=29810 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210264539.500:324): user pid=30643 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210276907.618:325): user pid=30836 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210276912.556:326): user pid=30938 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210276913.042:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=29793 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210276942.575:328): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=USER_ACCT msg=audit(1210276942.578:329): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=CRED_ACQ msg=audit(1210276942.579:330): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_START msg=audit(1210276942.672:331): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_END msg=audit(1210276942.672:332): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_CMD msg=audit(1210276942.673:333): user pid=31031 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/3 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210276942.679:334): user pid=31058 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=USER_ACCT msg=audit(1210280461.663:335): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210280461.672:336): user pid=2629 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210280461.673:337): login pid=2629 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1210280461.770:338): user pid=2629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210280461.932:339): user pid=2629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210280461.933:340): user pid=2629 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210282196.499:341): user pid=4510 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210295665.571:342): user pid=4763 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210295670.986:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=30956 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210295826.505:344): user pid=5164 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210296119.500:345): user pid=5798 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210322504.000:346): user pid=6077 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210322508.536:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4897 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210322515.283:348): user pid=6214 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210323662.161:349): user pid=7348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210323662.204:350): user pid=7348 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210323662.205:351): login pid=7348 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_START msg=audit(1210323662.323:352): user pid=7348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210323662.449:353): user pid=7348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210323662.451:354): user pid=7348 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210327261.697:355): user pid=10258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210327261.700:356): user pid=10258 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210327261.700:357): login pid=10258 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1210327261.761:358): user pid=10258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210327261.814:359): user pid=10258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210327261.814:360): user pid=10258 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210330861.843:361): user pid=12873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210330861.846:362): user pid=12873 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210330861.846:363): login pid=12873 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1210330861.847:364): user pid=12873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210330861.856:365): user pid=12873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210330861.856:366): user pid=12873 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210334461.935:367): user pid=15496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210334461.936:368): user pid=15496 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210334461.937:369): login pid=15496 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_START msg=audit(1210334461.938:370): user pid=15496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210334461.943:371): user pid=15496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210334461.943:372): user pid=15496 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210338062.080:373): user pid=18083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210338062.083:374): user pid=18083 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210338062.084:375): login pid=18083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1210338062.113:376): user pid=18083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210338062.165:377): user pid=18083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210338062.167:378): user pid=18083 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210341661.565:379): user pid=20721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210341661.566:380): user pid=20721 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210341661.566:381): login pid=20721 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1210341661.620:382): user pid=20721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210341661.739:383): user pid=20721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210341661.740:384): user pid=20721 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210345261.766:385): user pid=23240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210345261.768:386): user pid=23240 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210345261.768:387): login pid=23240 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_START msg=audit(1210345261.770:388): user pid=23240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210345261.777:389): user pid=23240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210345261.778:390): user pid=23240 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210348862.153:391): user pid=25867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210348862.161:392): user pid=25867 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210348862.161:393): login pid=25867 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_START msg=audit(1210348862.223:394): user pid=25867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210348862.353:395): user pid=25867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210348862.354:396): user pid=25867 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210352461.711:397): user pid=28952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210352461.715:398): user pid=28952 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210352461.716:399): login pid=28952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_START msg=audit(1210352461.754:400): user pid=28952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210352461.805:401): user pid=28952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210352461.806:402): user pid=28952 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210356062.073:403): user pid=31645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210356062.076:404): user pid=31645 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210356062.077:405): login pid=31645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_START msg=audit(1210356062.128:406): user pid=31645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210356062.201:407): user pid=31645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210356062.202:408): user pid=31645 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210359661.243:409): user pid=1829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210359661.244:410): user pid=1829 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210359661.244:411): login pid=1829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1210359661.246:412): user pid=1829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210359661.250:413): user pid=1829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210359661.250:414): user pid=1829 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210363261.686:415): user pid=4853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210363261.695:416): user pid=4853 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210363261.696:417): login pid=4853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1210363261.734:418): user pid=4853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210363261.920:419): user pid=4853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210363261.920:420): user pid=4853 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210366569.608:421): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210366569.614:422): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210366569.717:423): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210366569.811:424): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210366569.812:425): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210366569.812:426): user pid=9892 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D5576682052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E302E756C696D2E66697273742E74696D652E72756E2E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303530372E312E302E756C696D2E66697273742E74696D652E72756E2E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210366569.815:427): user pid=9896 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210366864.330:428): user pid=10395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210366864.452:429): user pid=10395 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210366864.452:430): login pid=10395 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_START msg=audit(1210366864.871:431): user pid=10395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210366865.000:432): user pid=10395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210366865.000:433): user pid=10395 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210367570.891:434): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210367570.894:435): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210367570.943:436): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210367571.078:437): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210367571.078:438): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210367571.092:439): user pid=11144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210367571.103:440): user pid=11152 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210370461.453:441): user pid=13623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210370461.456:442): user pid=13623 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210370461.456:443): login pid=13623 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1210370461.749:444): user pid=13623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210370461.890:445): user pid=13623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210370461.890:446): user pid=13623 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210370826.500:447): user pid=14104 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210397629.058:448): auid=500 uid=0 gid=0 ses=1 subj=unconfined_u:system_r:bluetooth_t:s0 pid=31172 comm="hcid" sig=11 >type=USYS_CONFIG msg=audit(1210397629.741:449): user pid=14524 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210397634.428:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=6187 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210397644.636:451): user pid=14632 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210399261.245:452): user pid=16052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210399261.247:453): user pid=16052 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210399261.247:454): login pid=16052 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_START msg=audit(1210399261.249:455): user pid=16052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210399261.254:456): user pid=16052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210399261.254:457): user pid=16052 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210402620.519:458): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210402620.521:459): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210402620.578:460): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210402620.579:461): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210402620.579:462): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210402620.579:463): user pid=18673 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat/RPMS/i386" cmd=2F62696E2F72706D202D557668206269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E6663392E693338362E72706D206269746C6265652D312E322D312E67697432303038303530372E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210402620.581:464): user pid=18681 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210402709.466:465): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210402709.467:466): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210402709.468:467): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210402709.468:468): user pid=18746 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat/RPMS/i386" cmd=2F62696E2F72706D202D557668202D2D666F726365206269746C6265652D6465627567696E666F2D312E322D312E67697432303038303530372E312E6663392E693338362E72706D206269746C6265652D312E322D312E67697432303038303530372E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210402709.469:469): user pid=18747 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210402861.420:470): user pid=18946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210402861.423:471): user pid=18946 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210402861.423:472): login pid=18946 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_START msg=audit(1210402861.426:473): user pid=18946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210402861.464:474): user pid=18946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210402861.464:475): user pid=18946 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210406461.592:476): user pid=21980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210406461.596:477): user pid=21980 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210406461.596:478): login pid=21980 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_START msg=audit(1210406461.682:479): user pid=21980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210406461.741:480): user pid=21980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210406461.741:481): user pid=21980 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210410061.961:482): user pid=25385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210410061.965:483): user pid=25385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210410061.965:484): login pid=25385 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_START msg=audit(1210410062.018:485): user pid=25385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210410062.043:486): user pid=25385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210410062.044:487): user pid=25385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210413661.704:488): user pid=28568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210413661.713:489): user pid=28568 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210413661.713:490): login pid=28568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1210413661.800:491): user pid=28568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210413662.080:492): user pid=28568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210413662.080:493): user pid=28568 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210417261.460:494): user pid=928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210417261.463:495): user pid=928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210417261.463:496): login pid=928 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1210417261.613:497): user pid=928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210417261.687:498): user pid=928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210417261.688:499): user pid=928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210420861.714:500): user pid=3907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210420861.717:501): user pid=3907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210420861.717:502): login pid=3907 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_START msg=audit(1210420861.720:503): user pid=3907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210420861.727:504): user pid=3907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210420861.727:505): user pid=3907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210423883.404:506): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210423883.407:507): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210423883.506:508): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210423883.508:509): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210423883.509:510): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210423883.509:511): user pid=6116 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F726365206269746C6265652D2A312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210423883.514:512): user pid=6130 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210423899.390:513): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210423899.391:514): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210423899.391:515): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210423899.391:516): user pid=6143 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210423899.393:517): user pid=6144 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210424461.756:518): user pid=6588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210424461.759:519): user pid=6588 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210424461.759:520): login pid=6588 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1210424461.762:521): user pid=6588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210424461.768:522): user pid=6588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210424461.768:523): user pid=6588 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210428061.800:524): user pid=9513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210428061.805:525): user pid=9513 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210428061.805:526): login pid=9513 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_START msg=audit(1210428061.809:527): user pid=9513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210428061.821:528): user pid=9513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210428061.822:529): user pid=9513 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210431661.848:530): user pid=12385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210431661.849:531): user pid=12385 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210431661.849:532): login pid=12385 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_START msg=audit(1210431661.851:533): user pid=12385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210431661.855:534): user pid=12385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210431661.855:535): user pid=12385 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210435261.965:536): user pid=15152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210435261.967:537): user pid=15152 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210435261.967:538): login pid=15152 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_START msg=audit(1210435261.968:539): user pid=15152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210435261.973:540): user pid=15152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210435261.973:541): user pid=15152 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210438861.135:542): user pid=17814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210438861.137:543): user pid=17814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210438861.137:544): login pid=17814 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1210438861.139:545): user pid=17814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210438861.146:546): user pid=17814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210438861.146:547): user pid=17814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210442461.173:548): user pid=20583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210442461.175:549): user pid=20583 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210442461.176:550): login pid=20583 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_START msg=audit(1210442461.178:551): user pid=20583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210442461.185:552): user pid=20583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210442461.185:553): user pid=20583 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210446061.211:554): user pid=23237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210446061.214:555): user pid=23237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210446061.215:556): login pid=23237 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_START msg=audit(1210446061.217:557): user pid=23237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210446061.226:558): user pid=23237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210446061.226:559): user pid=23237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1210448030.100:560): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=26819 comm="rhythmbox" sig=11 >type=USER_ACCT msg=audit(1210449661.696:561): user pid=26295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210449661.700:562): user pid=26295 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210449661.700:563): login pid=26295 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1210449661.738:564): user pid=26295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210449661.790:565): user pid=26295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210449661.790:566): user pid=26295 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210453261.921:567): user pid=29351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210453261.924:568): user pid=29351 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210453261.925:569): login pid=29351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_START msg=audit(1210453261.974:570): user pid=29351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210453262.005:571): user pid=29351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210453262.005:572): user pid=29351 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210454622.158:573): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=failed)' >type=USER_AUTH msg=audit(1210454626.825:574): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210454626.827:575): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210454626.869:576): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210454626.889:577): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210454626.890:578): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210454626.890:579): user pid=31856 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210454626.892:580): user pid=31871 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_AUTH msg=audit(1210456501.022:581): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210456501.028:582): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210456501.142:583): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210456501.176:584): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210456501.176:585): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210456501.177:586): user pid=3073 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/redhat" cmd=2F62696E2F72706D202D557668202D2D666F7263652052504D532F693338362F6269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D2052504D532F693338362F6269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210456501.181:587): user pid=3082 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210456861.430:588): user pid=3595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210456861.439:589): user pid=3595 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210456861.440:590): login pid=3595 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1210456861.477:591): user pid=3595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210456861.585:592): user pid=3595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210456861.585:593): user pid=3595 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210456985.684:594): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210456985.686:595): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210456985.718:596): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210456985.749:597): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210456985.750:598): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210456985.767:599): user pid=3686 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210456985.770:600): user pid=3691 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USYS_CONFIG msg=audit(1210457374.500:601): user pid=4385 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210487181.820:602): user pid=4723 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210487186.428:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=14611 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210487190.457:604): user pid=4824 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210489261.248:605): user pid=6775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210489261.251:606): user pid=6775 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210489261.251:607): login pid=6775 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_START msg=audit(1210489261.290:608): user pid=6775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210489261.336:609): user pid=6775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210489261.336:610): user pid=6775 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210492861.364:611): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210492861.365:612): user pid=9298 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210492861.366:613): login pid=9298 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=USER_START msg=audit(1210492861.367:614): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210492861.371:615): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210492861.371:616): user pid=9298 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210496461.399:617): user pid=11919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210496461.402:618): user pid=11919 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210496461.403:619): login pid=11919 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_START msg=audit(1210496461.404:620): user pid=11919 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210496461.409:621): user pid=11919 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210496461.409:622): user pid=11919 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210500061.438:623): user pid=14436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210500061.440:624): user pid=14436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210500061.441:625): login pid=14436 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_START msg=audit(1210500061.444:626): user pid=14436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210500061.448:627): user pid=14436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210500061.448:628): user pid=14436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210503661.474:629): user pid=17056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210503661.476:630): user pid=17056 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210503661.477:631): login pid=17056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_START msg=audit(1210503661.479:632): user pid=17056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210503661.485:633): user pid=17056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210503661.485:634): user pid=17056 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210507261.511:635): user pid=19627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210507261.514:636): user pid=19627 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210507261.514:637): login pid=19627 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_START msg=audit(1210507261.516:638): user pid=19627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210507261.524:639): user pid=19627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210507261.524:640): user pid=19627 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210510862.367:641): user pid=22941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210510862.376:642): user pid=22941 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210510862.377:643): login pid=22941 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_START msg=audit(1210510862.518:644): user pid=22941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210510862.637:645): user pid=22941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210510862.638:646): user pid=22941 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210514461.829:647): user pid=25940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210514461.832:648): user pid=25940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210514461.833:649): login pid=25940 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_START msg=audit(1210514461.894:650): user pid=25940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210514461.928:651): user pid=25940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210514461.929:652): user pid=25940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210518061.955:653): user pid=28579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210518061.957:654): user pid=28579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210518061.957:655): login pid=28579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_START msg=audit(1210518061.959:656): user pid=28579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210518061.965:657): user pid=28579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210518061.965:658): user pid=28579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210521661.987:659): user pid=31323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210521661.987:660): user pid=31323 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210521661.987:661): login pid=31323 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_START msg=audit(1210521661.989:662): user pid=31323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210521661.992:663): user pid=31323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210521661.992:664): user pid=31323 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210525261.106:665): user pid=1512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210525261.108:666): user pid=1512 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210525261.109:667): login pid=1512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=USER_START msg=audit(1210525261.130:668): user pid=1512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210525261.133:669): user pid=1512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210525261.133:670): user pid=1512 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210528861.164:671): user pid=4477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210528861.165:672): user pid=4477 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210528861.165:673): login pid=4477 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_START msg=audit(1210528861.168:674): user pid=4477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210528861.172:675): user pid=4477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210528861.172:676): user pid=4477 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210532461.197:677): user pid=7132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210532461.199:678): user pid=7132 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210532461.199:679): login pid=7132 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_START msg=audit(1210532461.202:680): user pid=7132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210532461.207:681): user pid=7132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210532461.208:682): user pid=7132 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210536061.306:683): user pid=10065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210536061.308:684): user pid=10065 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210536061.308:685): login pid=10065 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_START msg=audit(1210536061.309:686): user pid=10065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210536061.314:687): user pid=10065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210536061.315:688): user pid=10065 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210539661.494:689): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210539661.498:690): user pid=13125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210539661.498:691): login pid=13125 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_START msg=audit(1210539661.568:692): user pid=13125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210539661.595:693): user pid=13125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210539661.595:694): user pid=13125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210543262.065:695): user pid=16684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210543262.073:696): user pid=16684 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210543262.073:697): login pid=16684 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_START msg=audit(1210543262.134:698): user pid=16684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210543262.197:699): user pid=16684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210543262.198:700): user pid=16684 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210546861.333:701): user pid=20099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210546861.335:702): user pid=20099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210546861.335:703): login pid=20099 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_START msg=audit(1210546861.366:704): user pid=20099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210546861.407:705): user pid=20099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210546861.407:706): user pid=20099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210546962.500:707): user pid=20361 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210547334.755:708): user pid=20642 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210547335.640:709): auid=500 uid=0 gid=0 ses=1 subj=unconfined_u:system_r:NetworkManager_t:s0 pid=4348 comm="NetworkManager" sig=6 >type=ANOM_ABEND msg=audit(1210547339.560:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4802 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210547340.701:711): user pid=20742 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210547371.539:712): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210547371.544:713): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210547371.545:714): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210547371.548:715): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210547371.549:716): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210547371.549:717): user pid=20801 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210547371.551:718): user pid=20805 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USYS_CONFIG msg=audit(1210548243.519:719): user pid=22370 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210570746.899:720): user pid=22603 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210570751.607:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=20850 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210570798.157:722): user pid=22780 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210571804.082:723): user pid=23840 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210571804.084:724): user pid=23840 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210571812.123:725): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210571812.187:726): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210571812.188:727): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210571812.188:728): user pid=23858 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=2F686F6D652F6D6174656A2F506F6463617374732F74686973205745454B20696E2054454348202D204F67672045646974696F6E cmd=2F7362696E2F7365727669636520626C7565746F6F74682072657374617274 (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210571812.194:729): user pid=23859 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210572061.617:730): user pid=24101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210572061.626:731): user pid=24101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210572061.627:732): login pid=24101 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_START msg=audit(1210572061.629:733): user pid=24101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210572061.683:734): user pid=24101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210572061.684:735): user pid=24101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210572448.313:736): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1210572448.600:737): user pid=2802 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210572569.145:738): user pid=24536 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210572569.149:739): user pid=24536 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210572569.158:740): user pid=24536 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210572569.206:741): login pid=24536 uid=0 old auid=4294967295 new auid=504 old ses=4294967295 new ses=66 >type=USER_ROLE_CHANGE msg=audit(1210572569.343:742): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210572570.038:743): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210572570.387:744): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=504: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=USER_AUTH msg=audit(1210573990.605:745): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210574004.185:746): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210574023.411:747): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210574023.416:748): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210574023.488:749): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210574023.492:750): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210574023.492:751): user pid=26263 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210574023.492:752): user pid=26263 uid=500 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=CRED_DISP msg=audit(1210574154.509:753): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210574154.539:754): user pid=2635 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210574341.859:755): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210574341.861:756): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210574341.862:757): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210574341.863:758): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210574341.863:759): user pid=26645 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210574341.863:760): user pid=26645 uid=500 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=USER_ACCT msg=audit(1210575661.805:761): user pid=28137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210575661.807:762): user pid=28137 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210575661.807:763): login pid=28137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_START msg=audit(1210575661.812:764): user pid=28137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210575661.835:765): user pid=28137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210575661.835:766): user pid=28137 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210579261.854:767): user pid=30731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210579261.855:768): user pid=30731 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210579261.855:769): login pid=30731 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_START msg=audit(1210579261.856:770): user pid=30731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210579261.861:771): user pid=30731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210579261.861:772): user pid=30731 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210582861.972:773): user pid=1038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210582861.974:774): user pid=1038 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210582861.974:775): login pid=1038 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_START msg=audit(1210582861.978:776): user pid=1038 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210582861.983:777): user pid=1038 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210582861.983:778): user pid=1038 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210586462.005:779): user pid=3847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210586462.006:780): user pid=3847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210586462.006:781): login pid=3847 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_START msg=audit(1210586462.007:782): user pid=3847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210586462.010:783): user pid=3847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210586462.011:784): user pid=3847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210590061.029:785): user pid=6482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210590061.030:786): user pid=6482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210590061.030:787): login pid=6482 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71 >type=USER_START msg=audit(1210590061.031:788): user pid=6482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210590061.034:789): user pid=6482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210590061.035:790): user pid=6482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210593661.062:791): user pid=9151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210593661.063:792): user pid=9151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210593661.064:793): login pid=9151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72 >type=USER_START msg=audit(1210593661.065:794): user pid=9151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210593661.069:795): user pid=9151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210593661.069:796): user pid=9151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210597261.086:797): user pid=11915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210597261.086:798): user pid=11915 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210597261.086:799): login pid=11915 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73 >type=USER_START msg=audit(1210597261.089:800): user pid=11915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210597261.093:801): user pid=11915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210597261.093:802): user pid=11915 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210600861.116:803): user pid=14679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210600861.119:804): user pid=14679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210600861.120:805): login pid=14679 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74 >type=USER_START msg=audit(1210600861.123:806): user pid=14679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210600861.128:807): user pid=14679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210600861.128:808): user pid=14679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210604461.150:809): user pid=17215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210604461.151:810): user pid=17215 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210604461.152:811): login pid=17215 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75 >type=USER_START msg=audit(1210604461.153:812): user pid=17215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210604461.159:813): user pid=17215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210604461.159:814): user pid=17215 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210608061.178:815): user pid=19984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210608061.179:816): user pid=19984 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210608061.179:817): login pid=19984 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76 >type=USER_START msg=audit(1210608061.180:818): user pid=19984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210608061.184:819): user pid=19984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210608061.184:820): user pid=19984 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210611661.448:821): user pid=22744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210611661.449:822): user pid=22744 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210611661.449:823): login pid=22744 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77 >type=USER_START msg=audit(1210611661.462:824): user pid=22744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210611661.466:825): user pid=22744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210611661.466:826): user pid=22744 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210615261.489:827): user pid=25412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210615261.490:828): user pid=25412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210615261.490:829): login pid=25412 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78 >type=USER_START msg=audit(1210615261.491:830): user pid=25412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210615261.495:831): user pid=25412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210615261.495:832): user pid=25412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210618861.516:833): user pid=28093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210618861.518:834): user pid=28093 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210618861.518:835): login pid=28093 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79 >type=USER_START msg=audit(1210618861.519:836): user pid=28093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210618861.523:837): user pid=28093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210618861.523:838): user pid=28093 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210622417.573:839): user pid=31037 uid=504 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210622417.575:840): user pid=31037 uid=504 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210622461.549:841): user pid=31212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210622461.550:842): user pid=31212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210622461.551:843): login pid=31212 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_START msg=audit(1210622461.552:844): user pid=31212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210622461.558:845): user pid=31212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210622461.558:846): user pid=31212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210622680.278:847): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=failed)' >type=USER_AUTH msg=audit(1210622683.977:848): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210622683.982:849): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210622684.084:850): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210622684.092:851): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210622684.092:852): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210622684.093:853): user pid=31547 uid=0 auid=504 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/0 res=success)' >type=ANOM_ABEND msg=audit(1210624113.413:854): auid=504 uid=504 gid=504 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1823 comm="npviewer.bin" sig=11 >type=CRED_DISP msg=audit(1210625632.825:855): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1210625632.980:856): user pid=24536 uid=0 auid=504 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="marketa" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210625648.465:857): user pid=3252 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210625648.468:858): user pid=3252 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210625648.479:859): user pid=3252 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210625648.524:860): login pid=3252 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=81 >type=USER_ROLE_CHANGE msg=audit(1210625648.643:861): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210625652.184:862): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210625652.398:863): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=CRED_DISP msg=audit(1210625744.216:864): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1210625744.267:865): user pid=3252 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210625755.644:866): user pid=3996 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210625755.647:867): user pid=3996 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210625755.658:868): user pid=3996 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210625755.708:869): login pid=3996 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=82 >type=USER_ROLE_CHANGE msg=audit(1210625755.731:870): user pid=3996 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210625755.752:871): user pid=3996 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210625755.819:872): user pid=3996 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=USER_AUTH msg=audit(1210625784.435:873): user pid=26459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210625784.439:874): user pid=26459 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210625784.440:875): login pid=26459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_ROLE_CHANGE msg=audit(1210625784.452:876): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210625784.465:877): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210625784.466:878): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210625784.469:879): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210625797.997:880): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210625798.000:881): user pid=26459 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=ANOM_ABEND msg=audit(1210625914.333:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:iscsid_t:s0 pid=2257 comm="iscsid" sig=11 >type=DAEMON_END msg=audit(1210625918.203:530): auditd normal halt, sending auid=0 pid=5166 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210625980.181:287): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.i686 auid=4294967295 pid=2064 res=success >type=CONFIG_CHANGE msg=audit(1210625980.332:3): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_AUTH msg=audit(1210626030.381:4): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210626030.385:5): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210626030.413:6): user pid=2776 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210626030.445:7): login pid=2776 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210626030.477:8): user pid=2776 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210626034.339:9): user pid=2776 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210626034.408:10): user pid=2776 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=USER_ACCT msg=audit(1210626062.104:11): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210626062.107:12): user pid=3256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210626062.108:13): login pid=3256 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1210626062.111:14): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210626062.558:15): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210626062.558:16): user pid=3256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210629661.589:17): user pid=6441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210629661.593:18): user pid=6441 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210629661.593:19): login pid=6441 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1210629661.595:20): user pid=6441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210629661.600:21): user pid=6441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210629661.600:22): user pid=6441 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210630117.220:23): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210630117.226:24): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210630117.260:25): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210630117.287:26): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210630117.288:27): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210630117.288:28): user pid=9323 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F72706D202D557668202D2D666F726365206269746C6265652D6465627567696E666F2D312E322D312E67697432303038303531302E312E6663392E693338362E72706D206269746C6265652D312E322D312E67697432303038303531302E312E6663392E693338362E72706D (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210630117.293:29): user pid=9506 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_AUTH msg=audit(1210630669.988:30): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=USER_ACCT msg=audit(1210630669.993:31): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=CRED_ACQ msg=audit(1210630670.068:32): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_START msg=audit(1210630670.122:33): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_END msg=audit(1210630670.122:34): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/0 res=success)' >type=USER_CMD msg=audit(1210630670.123:35): user pid=15033 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=2F7573722F62696E2F79756D20636C65616E206D65746164617461 (terminal=pts/0 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210630670.128:36): user pid=15042 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/0 res=success)' >type=ANOM_ABEND msg=audit(1210632543.305:37): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=16947 comm="evolution-data-" sig=6 >type=USER_ACCT msg=audit(1210633261.936:38): user pid=17816 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210633261.938:39): user pid=17816 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210633261.939:40): login pid=17816 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1210633261.990:41): user pid=17816 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210633262.098:42): user pid=17816 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210633262.099:43): user pid=17816 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210636861.129:44): user pid=21482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210636861.131:45): user pid=21482 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210636861.131:46): login pid=21482 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1210636861.135:47): user pid=21482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210636861.140:48): user pid=21482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210636861.140:49): user pid=21482 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=AVC msg=audit(1210637101.838:50): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418184 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.838:50): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.839:51): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418187 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.839:51): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.841:52): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418304 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.841:52): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.842:53): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418402 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:auditd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.842:53): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.842:54): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418405 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:audisp_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.842:54): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.842:55): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418408 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:restorecond_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.842:55): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.842:56): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418411 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.842:56): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.842:57): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418414 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:irqbalance_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.842:57): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.842:58): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418417 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.842:58): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.843:59): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418420 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpcbind_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.843:59): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.843:60): avc: denied { sys_nice } for pid=22221 comm="ps" capability=23 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tclass=capability >type=SYSCALL msg=audit(1210637101.843:60): arch=40000003 syscall=3 success=yes exit=194 a0=5 a1=5ba960 a2=3ff a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.843:61): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418423 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:pcscd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.843:61): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.843:62): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418426 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.843:62): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.843:63): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418429 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.843:63): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.844:64): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418453 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:iscsid_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.844:64): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.844:65): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418459 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:named_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.844:65): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.844:66): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418462 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:setroubleshootd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.844:66): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.844:67): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418465 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.844:67): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.844:68): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418471 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.844:68): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.844:69): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418474 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:ntpd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.844:69): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.845:70): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418477 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:soundd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.845:70): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.845:71): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418480 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.845:71): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.845:72): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418483 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.845:72): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.845:73): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418489 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.845:73): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.845:74): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418492 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:virtd_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.845:74): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.845:75): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418495 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.845:75): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.846:76): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418501 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.846:76): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.846:77): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418504 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.846:77): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.846:78): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418507 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.846:78): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.846:79): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418525 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.846:79): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.847:80): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418528 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.847:80): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.847:81): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418534 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.847:81): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.847:82): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418540 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.847:82): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.847:83): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418543 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:inetd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.847:83): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.847:84): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418546 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.847:84): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.848:85): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418549 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:getty_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.848:85): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.848:86): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418570 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.848:86): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.848:87): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418579 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.848:87): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.849:88): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418646 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.849:88): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.851:89): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418689 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.851:89): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.851:90): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418716 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:pam_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.851:90): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.853:91): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418781 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vpnc_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.853:91): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.853:92): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418798 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.853:92): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.854:93): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=418812 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0-s0:c0.c1023 tclass=file >type=SYSCALL msg=audit(1210637101.854:93): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210637101.854:94): avc: denied { read } for pid=22221 comm="ps" name="stat" dev=proc ino=419111 scontext=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hwclock_t:s0 tclass=file >type=SYSCALL msg=audit(1210637101.854:94): arch=40000003 syscall=5 success=yes exit=5 a0=5ba900 a1=0 a2=0 a3=5ba900 items=0 ppid=22220 pid=22221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ps" exe="/bin/ps" subj=system_u:system_r:dhcpc_t:s0-s0:c0.c1023 key=(null) >type=USYS_CONFIG msg=audit(1210637102.500:95): user pid=22176 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210665637.678:96): user pid=22426 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210665644.095:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=2575 comm="nm-system-setti" sig=6 >type=USER_AUTH msg=audit(1210665651.475:98): user pid=22622 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210665686.120:99): user pid=22729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210665686.123:100): user pid=22729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210665686.123:101): login pid=22729 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1210665686.127:102): user pid=22729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210665686.139:103): user pid=22729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210665686.139:104): user pid=22729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210665708.249:105): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=USER_ACCT msg=audit(1210665708.252:106): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)' >type=CRED_ACQ msg=audit(1210665708.275:107): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_START msg=audit(1210665708.278:108): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_END msg=audit(1210665708.279:109): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=viklef, addr=127.0.0.1, terminal=/dev/pts/1 res=success)' >type=USER_CMD msg=audit(1210665708.280:110): user pid=22771 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" (terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210665708.328:111): user pid=22782 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh new-context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh: exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/1 res=success)'
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 446175
: 305212