Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 305364 Details for
Bug 446380
selinux policy prevents suexec cgi scripts
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log
audit.log (text/plain), 643.38 KB, created by
Bradley
on 2008-05-14 14:09:28 UTC
(
hide
)
Description:
audit.log
Filename:
MIME Type:
Creator:
Bradley
Created:
2008-05-14 14:09:28 UTC
Size:
643.38 KB
patch
obsolete
>type=CRED_ACQ msg=audit(1210411801.313:481): user pid=3714 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210411801.313:482): login pid=3714 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210411801.319:483): user pid=3714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210411801.347:484): user pid=3714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210411801.347:485): user pid=3714 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210412383.500:486): user pid=4502 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210412428.943:487): user pid=4643 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210412437.419:488): user pid=4811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210412437.420:489): user pid=4811 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210412437.420:490): login pid=4811 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210412437.428:491): user pid=4811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210412437.443:492): user pid=4811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210412437.443:493): user pid=4811 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210413001.471:494): user pid=5266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210413001.472:495): user pid=5266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210413001.472:496): login pid=5266 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210413001.476:497): user pid=5266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210413001.487:498): user pid=5266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210413001.487:499): user pid=5266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210413601.503:500): user pid=5673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210413601.503:501): user pid=5673 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210413601.503:502): login pid=5673 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210413601.508:503): user pid=5673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210413601.521:504): user pid=5673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210413601.521:505): user pid=5673 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210413661.530:506): user pid=5716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210413661.531:507): user pid=5716 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210413661.531:508): login pid=5716 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210413661.535:509): user pid=5716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210413661.550:510): user pid=5716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210413661.550:511): user pid=5716 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210414201.565:512): user pid=6098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210414201.565:513): user pid=6098 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210414201.566:514): login pid=6098 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210414201.569:515): user pid=6098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210414201.581:516): user pid=6098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210414201.582:517): user pid=6098 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210414801.595:518): user pid=6504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210414801.596:519): user pid=6504 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210414801.596:520): login pid=6504 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210414801.601:521): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210414801.610:522): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210414801.610:523): user pid=6504 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210415401.622:524): user pid=6907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210415401.623:525): user pid=6907 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210415401.623:526): login pid=6907 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210415401.628:527): user pid=6907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210415401.639:528): user pid=6907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210415401.639:529): user pid=6907 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210416001.651:530): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210416001.651:531): user pid=7319 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210416001.651:532): login pid=7319 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210416001.657:533): user pid=7319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210416001.676:534): user pid=7319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210416001.676:535): user pid=7319 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210416601.689:536): user pid=7752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210416601.690:537): user pid=7752 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210416601.690:538): login pid=7752 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210416601.695:539): user pid=7752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210416601.704:540): user pid=7752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210416601.704:541): user pid=7752 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210417201.715:542): user pid=8182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210417201.715:543): user pid=8182 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210417201.715:544): login pid=8182 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210417201.722:545): user pid=8182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210417201.729:546): user pid=8182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210417201.730:547): user pid=8182 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210417261.740:548): user pid=8228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210417261.741:549): user pid=8228 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210417261.741:550): login pid=8228 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210417261.749:551): user pid=8228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210417261.762:552): user pid=8228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210417261.762:553): user pid=8228 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210417801.774:554): user pid=8618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210417801.775:555): user pid=8618 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210417801.775:556): login pid=8618 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210417801.780:557): user pid=8618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210417801.789:558): user pid=8618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210417801.789:559): user pid=8618 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210418401.802:560): user pid=9054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210418401.803:561): user pid=9054 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210418401.803:562): login pid=9054 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210418401.808:563): user pid=9054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210418401.820:564): user pid=9054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210418401.820:565): user pid=9054 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210419001.832:566): user pid=9497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210419001.833:567): user pid=9497 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210419001.833:568): login pid=9497 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210419001.838:569): user pid=9497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210419001.846:570): user pid=9497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210419001.846:571): user pid=9497 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210419601.857:572): user pid=9957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210419601.858:573): user pid=9957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210419601.858:574): login pid=9957 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210419601.863:575): user pid=9957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210419601.877:576): user pid=9957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210419601.878:577): user pid=9957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210420201.889:578): user pid=10420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210420201.890:579): user pid=10420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210420201.890:580): login pid=10420 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210420201.895:581): user pid=10420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210420201.911:582): user pid=10420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210420201.911:583): user pid=10420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210420598.096:584): user pid=2588 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210420598.101:585): user pid=2588 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210420598.104:586): login pid=2588 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1210420598.173:587): user pid=2588 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210420598.211:588): user pid=2588 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210420598.211:589): user pid=2588 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210420598.211:590): user pid=2588 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210420631.674:591): user pid=2589 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1210420631.678:592): user pid=2589 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1210420631.679:593): login pid=2589 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1210420631.690:594): user pid=2589 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1210420631.695:595): user pid=2589 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1210420631.695:596): user pid=2589 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1210420631.696:597): user pid=2589 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1210420669.273:598): user pid=2589 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1210420669.274:599): user pid=2589 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_DISP msg=audit(1210420669.279:600): user pid=2588 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210420669.280:601): user pid=2588 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210420669.767:602): user pid=2648 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210420669.767:603): user pid=2648 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=DAEMON_START msg=audit(1210420728.874:4792): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2092 res=success >type=CONFIG_CHANGE msg=audit(1210420728.974:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210420728.974:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210420729.019:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210420729.019:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210420739.455:9): user pid=2440 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210420739.456:10): user pid=2440 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210420741.221:11): user pid=2468 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210420741.391:12): user pid=2468 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=CRED_DISP msg=audit(1210420742.091:13): user pid=2440 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210420742.092:14): user pid=2440 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210420783.887:15): user pid=2680 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210420783.894:16): user pid=2680 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210420783.909:17): user pid=2680 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210420783.912:18): login pid=2680 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210420783.946:19): user pid=2680 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210420784.051:20): user pid=2680 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210420784.052:21): user pid=2680 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210420802.130:22): user pid=3101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210420802.131:23): user pid=3101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210420802.132:24): login pid=3101 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210420802.140:25): user pid=3101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210420802.585:26): user pid=3101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210420802.585:27): user pid=3101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210420861.598:28): user pid=3213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210420861.599:29): user pid=3213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210420861.600:30): login pid=3213 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210420861.606:31): user pid=3213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210420861.689:32): user pid=3213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210420861.689:33): user pid=3213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210421401.860:34): user pid=3687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210421401.861:35): user pid=3687 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210421401.861:36): login pid=3687 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210421401.865:37): user pid=3687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210421401.873:38): user pid=3687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210421401.873:39): user pid=3687 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210422001.896:40): user pid=4122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210422001.897:41): user pid=4122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210422001.897:42): login pid=4122 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210422001.902:43): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210422001.913:44): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210422001.913:45): user pid=4122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210422601.924:46): user pid=4551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210422601.926:47): user pid=4551 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210422601.926:48): login pid=4551 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210422601.932:49): user pid=4551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210422601.949:50): user pid=4551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210422601.949:51): user pid=4551 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210423201.960:52): user pid=5017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210423201.961:53): user pid=5017 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210423201.961:54): login pid=5017 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210423201.966:55): user pid=5017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210423201.975:56): user pid=5017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210423201.975:57): user pid=5017 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210423801.986:58): user pid=5535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210423801.987:59): user pid=5535 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210423801.987:60): login pid=5535 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210423801.992:61): user pid=5535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210423802.007:62): user pid=5535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210423802.007:63): user pid=5535 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210424401.022:64): user pid=6343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210424401.023:65): user pid=6343 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210424401.023:66): login pid=6343 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210424401.027:67): user pid=6343 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210424401.036:68): user pid=6343 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210424401.036:69): user pid=6343 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210424461.046:70): user pid=6398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210424461.047:71): user pid=6398 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210424461.047:72): login pid=6398 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210424461.052:73): user pid=6398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210424461.065:74): user pid=6398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210424461.065:75): user pid=6398 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210424512.932:76): user pid=6469 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210424512.937:77): user pid=6469 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210424513.000:78): user pid=6469 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210424513.000:79): user pid=6469 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210424764.593:80): user pid=6469 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210424764.594:81): user pid=6469 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210425001.078:82): user pid=7029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210425001.080:83): user pid=7029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210425001.080:84): login pid=7029 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210425001.086:85): user pid=7029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210425001.095:86): user pid=7029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210425001.095:87): user pid=7029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210425222.868:88): user pid=7216 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210425222.874:89): user pid=7216 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210425222.888:90): user pid=7216 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210425222.888:91): user pid=7216 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210425601.108:92): user pid=7537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210425601.109:93): user pid=7537 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210425601.109:94): login pid=7537 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210425601.114:95): user pid=7537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210425601.128:96): user pid=7537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210425601.129:97): user pid=7537 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210425660.424:98): user pid=7608 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210425660.428:99): user pid=7608 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210425660.482:100): user pid=7608 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210425660.483:101): user pid=7608 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210426014.240:102): user pid=7608 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210426014.241:103): user pid=7608 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210426148.597:104): user pid=8076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210426148.597:105): user pid=8076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210426148.619:106): user pid=8076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210426201.141:107): user pid=8408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210426201.142:108): user pid=8408 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210426201.142:109): login pid=8408 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210426201.148:110): user pid=8408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210426201.159:111): user pid=8408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210426201.159:112): user pid=8408 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210426337.575:113): user pid=8076 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210426801.172:114): user pid=8916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210426801.172:115): user pid=8916 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210426801.172:116): login pid=8916 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210426801.177:117): user pid=8916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210426801.188:118): user pid=8916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210426801.188:119): user pid=8916 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210426912.695:120): user pid=7216 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210426912.699:121): user pid=7216 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210427401.204:122): user pid=9729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210427401.205:123): user pid=9729 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210427401.205:124): login pid=9729 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210427401.210:125): user pid=9729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210427401.220:126): user pid=9729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210427401.220:127): user pid=9729 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210427565.921:128): user pid=9874 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210427565.926:129): user pid=9874 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210427565.940:130): user pid=9874 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210427565.940:131): user pid=9874 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210427581.228:132): user pid=9940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210427581.229:133): user pid=9940 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210427581.229:134): login pid=9940 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210427581.237:135): user pid=9940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210427581.388:136): user pid=9940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210427581.389:137): user pid=9940 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210427584.710:138): user pid=9874 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210427584.711:139): user pid=9874 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210428001.404:140): user pid=10391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210428001.404:141): user pid=10391 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210428001.405:142): login pid=10391 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210428001.411:143): user pid=10391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210428001.449:144): user pid=10391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210428001.449:145): user pid=10391 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210428061.459:146): user pid=10434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210428061.459:147): user pid=10434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210428061.460:148): login pid=10434 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210428061.468:149): user pid=10434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210428061.474:150): user pid=10434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210428061.474:151): user pid=10434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210428601.486:152): user pid=10804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210428601.487:153): user pid=10804 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210428601.487:154): login pid=10804 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210428601.492:155): user pid=10804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210428601.502:156): user pid=10804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210428601.502:157): user pid=10804 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210429011.980:158): user pid=11379 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210429011.986:159): user pid=11379 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210429011.999:160): user pid=11379 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210429012.000:161): user pid=11379 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210429138.613:162): user pid=11379 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210429138.614:163): user pid=11379 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210429201.516:164): user pid=11689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210429201.518:165): user pid=11689 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210429201.519:166): login pid=11689 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210429201.525:167): user pid=11689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210429201.535:168): user pid=11689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210429201.535:169): user pid=11689 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210429333.008:170): user pid=2680 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210429333.008:171): user pid=2680 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210429335.094:172): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2606 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210429343.175:4793): auditd normal halt, sending auid=4294967295 pid=12054 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210468034.175:6552): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2074 res=success >type=CONFIG_CHANGE msg=audit(1210468034.275:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210468034.275:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210468034.321:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210468034.321:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210468048.582:9): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210468048.582:10): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210468049.741:11): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210468049.741:12): user pid=2420 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210468050.308:13): user pid=2465 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210468050.526:14): user pid=2465 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210468083.107:15): user pid=2667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210468083.111:16): user pid=2667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210468083.149:17): user pid=2667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210468083.155:18): login pid=2667 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210468083.213:19): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210468083.342:20): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210468083.343:21): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210468201.098:22): user pid=3526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210468201.099:23): user pid=3526 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210468201.099:24): login pid=3526 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210468201.104:25): user pid=3526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210468201.169:26): user pid=3526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210468201.169:27): user pid=3526 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210468277.957:28): user pid=3581 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210468277.962:29): user pid=3581 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210468278.051:30): user pid=3581 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210468278.051:31): user pid=3581 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210468310.906:32): user pid=3784 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210468310.912:33): user pid=3784 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210468310.960:34): user pid=3784 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210468310.960:35): user pid=3784 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210468801.195:36): user pid=4399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210468801.197:37): user pid=4399 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210468801.197:38): login pid=4399 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210468801.203:39): user pid=4399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210468801.216:40): user pid=4399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210468801.216:41): user pid=4399 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210468944.832:42): user pid=3784 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210468944.834:43): user pid=3784 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_CHAUTHTOK msg=audit(1210469041.171:44): user pid=5053 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="stapdev" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CHAUTHTOK msg=audit(1210469041.252:45): user pid=5058 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="stapusr" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_CHAUTHTOK msg=audit(1210469070.616:46): user pid=5112 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1210469070.642:47): user pid=5113 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=changing user shell acct="gdm" exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1210469112.813:48): user pid=5245 uid=0 auid=500 subj=system_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group acct="ntp" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_CHAUTHTOK msg=audit(1210469112.817:49): user pid=5246 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="ntp" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=MAC_POLICY_LOAD msg=audit(1210469160.563:50): policy loaded auid=500 >type=SYSCALL msg=audit(1210469160.563:50): arch=c000003e syscall=1 success=yes exit=4139553 a0=4 a1=2aaaab87a000 a2=3f2a21 a3=0 items=0 ppid=5309 pid=5314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210469161.004:51): user pid=2090 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AUTH msg=audit(1210469208.941:52): user pid=6627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210469208.959:53): user pid=6627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210469209.034:54): user pid=6627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1210469209.034:55): user pid=6627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_CHAUTHTOK msg=audit(1210469229.990:56): user pid=6714 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="torrent" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1210469229.994:57): user pid=6715 uid=0 auid=500 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=changing home directory acct="torrent" exe="/usr/sbin/usermod" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ROLE_CHANGE msg=audit(1210469271.693:58): user pid=7180 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1210469273.219:59): user pid=7181 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1210469282.651:60): user pid=7182 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1210469284.111:61): user pid=7192 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=add SELinux user record acct="unconfined_u" old-seuser=? old-role=? old-range=? new-seuser=unconfined_u new-role=unconfined_r system_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1210469285.696:62): user pid=7193 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify SELinux user record acct="unconfined_u" old-seuser=? old-role=system_r unconfined_r old-range=s0 new-seuser=? new-role=unconfined_r system_r system_r unconfined_r new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=USER_ROLE_CHANGE msg=audit(1210469295.700:63): user pid=7194 uid=0 auid=500 subj=system_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=modify selinux user mapping acct="__default__" old-seuser=system_u old-role=? old-range=s0-s0:c0.c1023 new-seuser=unconfined_u new-role=? new-range=s0-s0:c0.c1023 exe=/usr/sbin/semanage (hostname=?, addr=?, terminal=pts/1 res=failed)' >type=LABEL_LEVEL_CHANGE msg=audit(1210469303.523:64): user pid=7230 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210469303.585:65): user pid=7230 uid=0 auid=500 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1210469401.326:66): user pid=7420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210469401.327:67): user pid=7420 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210469401.327:68): login pid=7420 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210469401.333:69): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210469401.406:70): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210469401.406:71): user pid=7420 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210469490.760:72): user pid=3581 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210469490.763:73): user pid=3581 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210469598.279:74): user pid=6627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1210469598.280:75): user pid=6627 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_ABEND msg=audit(1210469804.669:76): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=7683 comm="npviewer.bin" sig=6 >type=USER_ACCT msg=audit(1210470001.430:77): user pid=8300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210470001.431:78): user pid=8300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210470001.431:79): login pid=8300 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210470001.435:80): user pid=8300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210470001.494:81): user pid=8300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210470001.495:82): user pid=8300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210470601.502:83): user pid=8885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210470601.502:84): user pid=8885 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210470601.503:85): login pid=8885 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210470601.508:86): user pid=8885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210470601.519:87): user pid=8885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210470601.520:88): user pid=8885 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210471201.538:89): user pid=11784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210471201.540:90): user pid=11784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210471201.540:91): login pid=11784 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210471201.548:92): user pid=11784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210471201.562:93): user pid=11784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210471201.562:94): user pid=11784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210471261.573:95): user pid=11827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210471261.573:96): user pid=11827 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210471261.574:97): login pid=11827 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210471261.579:98): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210471261.630:99): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210471261.630:100): user pid=11827 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210471801.639:101): user pid=12642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210471801.639:102): user pid=12642 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210471801.640:103): login pid=12642 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210471801.644:104): user pid=12642 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210471801.656:105): user pid=12642 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210471801.656:106): user pid=12642 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210472071.563:107): user pid=12826 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210472071.569:108): user pid=12826 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210472071.627:109): user pid=12826 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210472071.628:110): user pid=12826 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210472401.666:111): user pid=13181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210472401.666:112): user pid=13181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210472401.666:113): login pid=13181 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210472401.676:114): user pid=13181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210472401.692:115): user pid=13181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210472401.693:116): user pid=13181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210473001.708:117): user pid=18294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210473001.709:118): user pid=18294 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210473001.709:119): login pid=18294 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210473001.714:120): user pid=18294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210473001.734:121): user pid=18294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210473001.734:122): user pid=18294 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210473601.746:123): user pid=16044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210473601.747:124): user pid=16044 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210473601.747:125): login pid=16044 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210473601.754:126): user pid=16044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210473601.763:127): user pid=16044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210473601.763:128): user pid=16044 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210474201.775:129): user pid=13436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210474201.776:130): user pid=13436 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210474201.776:131): login pid=13436 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210474201.785:132): user pid=13436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210474201.794:133): user pid=13436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210474201.795:134): user pid=13436 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210474801.807:135): user pid=19151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210474801.808:136): user pid=19151 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210474801.808:137): login pid=19151 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210474801.814:138): user pid=19151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210474801.829:139): user pid=19151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210474801.829:140): user pid=19151 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210474861.834:141): user pid=19194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210474861.835:142): user pid=19194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210474861.835:143): login pid=19194 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210474861.840:144): user pid=19194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210474861.872:145): user pid=19194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210474861.872:146): user pid=19194 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210475401.885:147): user pid=19575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210475401.886:148): user pid=19575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210475401.886:149): login pid=19575 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210475401.892:150): user pid=19575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210475401.909:151): user pid=19575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210475401.909:152): user pid=19575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210475699.853:153): user pid=12826 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210475699.856:154): user pid=12826 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210475710.352:155): user pid=21141 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210475710.362:156): user pid=21141 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210475710.402:157): user pid=21141 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210475710.403:158): user pid=21141 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210475717.502:159): user pid=21141 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210475717.504:160): user pid=21141 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210476001.930:161): user pid=25678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210476001.931:162): user pid=25678 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210476001.931:163): login pid=25678 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210476001.936:164): user pid=25678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210476001.955:165): user pid=25678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210476001.955:166): user pid=25678 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210476601.984:167): user pid=29440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210476601.984:168): user pid=29440 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210476601.984:169): login pid=29440 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210476601.990:170): user pid=29440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210476602.048:171): user pid=29440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210476602.048:172): user pid=29440 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210477201.087:173): user pid=16634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210477201.087:174): user pid=16634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210477201.094:175): login pid=16634 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210477201.097:176): user pid=16634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210477201.170:177): user pid=16634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210477201.170:178): user pid=16634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210477643.409:179): user pid=10435 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210477643.418:180): user pid=10435 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210477643.465:181): user pid=10435 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210477643.468:182): user pid=10435 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210477643.469:183): user pid=10435 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_CMD msg=audit(1210477643.469:184): user pid=10435 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/bbaetz/src/iwlwifi-2.6" cmd="/usr/bin/time" (terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210477801.529:185): user pid=17249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210477801.531:186): user pid=17249 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210477801.531:187): login pid=17249 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210477801.538:188): user pid=17249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210477807.004:189): user pid=17249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210477807.005:190): user pid=17249 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210477842.370:191): user pid=22637 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210477842.370:192): user pid=22637 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210477842.370:193): user pid=22637 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_CMD msg=audit(1210477842.371:194): user pid=22637 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/bbaetz/src/iwlwifi-2.6" cmd="/usr/bin/time" (terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1210478320.860:195): user pid=27208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210478320.864:196): user pid=27208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210478321.003:197): user pid=27208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210478321.003:198): user pid=27208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210478401.041:199): user pid=27388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210478401.041:200): user pid=27388 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210478401.041:201): login pid=27388 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210478401.048:202): user pid=27388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210478401.159:203): user pid=27388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210478401.160:204): user pid=27388 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210478461.177:205): user pid=27431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210478461.178:206): user pid=27431 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210478461.178:207): login pid=27431 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210478461.192:208): user pid=27431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210478461.269:209): user pid=27431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210478461.269:210): user pid=27431 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210478638.748:211): user pid=27208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210478638.748:212): user pid=27208 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210479001.284:213): user pid=28005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210479001.285:214): user pid=28005 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210479001.285:215): login pid=28005 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210479001.292:216): user pid=28005 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210479001.338:217): user pid=28005 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210479001.339:218): user pid=28005 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210479131.358:219): user pid=28261 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210479131.363:220): user pid=28261 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210479131.375:221): user pid=28261 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1210479131.376:222): user pid=28261 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_AUTH msg=audit(1210479151.271:223): user pid=28350 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1210479151.277:224): user pid=28350 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1210479151.289:225): user pid=28350 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1210479151.289:226): user pid=28350 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_DISP msg=audit(1210479394.631:227): user pid=28261 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1210479394.632:228): user pid=28261 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210479601.356:229): user pid=28728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210479601.357:230): user pid=28728 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210479601.357:231): login pid=28728 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210479601.364:232): user pid=28728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210479601.377:233): user pid=28728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210479601.377:234): user pid=28728 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210479660.000:235): user pid=28350 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1210479660.003:236): user pid=28350 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1210479693.122:237): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210479693.122:238): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210479696.354:239): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2598 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210479703.816:6553): auditd normal halt, sending auid=4294967295 pid=29093 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210479763.599:2897): auditd start, ver=1.7.2 format=raw kernel=2.6.25-wl auid=4294967295 pid=2120 res=success >type=CONFIG_CHANGE msg=audit(1210479763.746:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_START msg=audit(1210479777.114:5): user pid=2462 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210479777.114:6): user pid=2462 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210479778.850:7): user pid=2489 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210479779.066:8): user pid=2489 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=CRED_DISP msg=audit(1210479779.160:9): user pid=2462 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210479779.161:10): user pid=2462 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210479807.525:11): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210479807.527:12): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210479807.529:13): login pid=2619 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210479807.565:14): user pid=2619 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210479807.571:15): user pid=2619 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210479807.628:16): user pid=2619 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210479807.628:17): user pid=2619 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210479811.628:18): user pid=2619 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210479811.629:19): user pid=2619 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210479815.432:20): user pid=2888 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1210479815.475:21): user pid=2888 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1210479817.915:22): user pid=2888 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210479817.918:23): user pid=2888 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210479817.919:24): login pid=2888 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1210479818.004:25): user pid=2888 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210479818.011:26): user pid=2888 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210479818.011:27): user pid=2888 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210479818.084:28): user pid=2888 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210479888.865:29): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_LOGIN msg=audit(1210479888.865:30): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=failed)' >type=USER_AUTH msg=audit(1210479890.937:31): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1210479890.940:32): user pid=2620 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1210479890.941:33): login pid=2620 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1210479890.952:34): user pid=2620 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1210479890.959:35): user pid=2620 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1210479890.960:36): user pid=2620 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1210479890.963:37): user pid=2620 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_AUTH msg=audit(1210480195.561:38): user pid=3895 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210480195.563:39): user pid=3895 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210480195.580:40): user pid=3895 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210480195.580:41): user pid=3895 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210480201.395:42): user pid=3949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210480201.396:43): user pid=3949 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210480201.396:44): login pid=3949 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1210480201.401:45): user pid=3949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210480201.433:46): user pid=3949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210480201.434:47): user pid=3949 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210480283.034:48): user pid=2888 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210480283.034:49): user pid=2620 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1210480283.036:50): user pid=2620 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1210480283.057:51): user pid=2888 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210480283.065:52): user pid=3895 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210480283.065:53): user pid=3895 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1210480290.972:2898): auditd normal halt, sending auid=0 pid=4273 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210480347.555:6715): auditd start, ver=1.7.2 format=raw kernel=2.6.25-wl auid=4294967295 pid=2144 res=success >type=CONFIG_CHANGE msg=audit(1210480347.701:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_START msg=audit(1210480364.013:5): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210480364.014:6): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210480365.675:7): user pid=2514 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210480365.807:8): user pid=2514 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=CRED_DISP msg=audit(1210480365.852:9): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210480365.854:10): user pid=2486 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210480380.902:11): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210480380.904:12): user pid=2650 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210480381.450:13): login pid=2650 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210480381.601:14): user pid=2650 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210480381.609:15): user pid=2650 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210480381.632:16): user pid=2650 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210480381.633:17): user pid=2650 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210480585.132:18): user pid=2650 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210480585.134:19): user pid=2650 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=DAEMON_END msg=audit(1210480594.497:6716): auditd normal halt, sending auid=0 pid=3289 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210480652.876:5925): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2075 res=success >type=CONFIG_CHANGE msg=audit(1210480652.976:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210480652.976:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210480653.021:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210480653.021:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210480669.394:9): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210480669.394:10): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210480670.830:11): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210480670.831:12): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210480670.981:13): user pid=2449 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210480671.086:14): user pid=2449 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1210480801.839:15): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210480801.840:16): user pid=2793 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210480801.840:17): login pid=2793 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210480801.845:18): user pid=2793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210480801.873:19): user pid=2793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210480801.873:20): user pid=2793 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210480932.468:21): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210480932.472:22): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210480932.484:23): user pid=2660 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210480932.490:24): login pid=2660 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210480932.518:25): user pid=2660 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210480932.619:26): user pid=2660 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210480932.620:27): user pid=2660 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210481401.958:28): user pid=3937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210481401.960:29): user pid=3937 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210481401.960:30): login pid=3937 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210481401.965:31): user pid=3937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210481401.998:32): user pid=3937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210481401.998:33): user pid=3937 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210482001.016:34): user pid=4797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210482001.016:35): user pid=4797 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210482001.016:36): login pid=4797 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210482001.022:37): user pid=4797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210482001.033:38): user pid=4797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210482001.033:39): user pid=4797 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210482061.039:40): user pid=4840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210482061.040:41): user pid=4840 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210482061.040:42): login pid=4840 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210482061.044:43): user pid=4840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210482061.123:44): user pid=4840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210482061.123:45): user pid=4840 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210482601.132:46): user pid=5237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210482601.133:47): user pid=5237 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210482601.133:48): login pid=5237 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210482601.139:49): user pid=5237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210482601.154:50): user pid=5237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210482601.154:51): user pid=5237 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210483201.172:52): user pid=5955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210483201.173:53): user pid=5955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210483201.173:54): login pid=5955 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210483201.178:55): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210483201.190:56): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210483201.190:57): user pid=5955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210483801.205:58): user pid=6392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210483801.206:59): user pid=6392 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210483801.206:60): login pid=6392 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210483801.211:61): user pid=6392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210483801.221:62): user pid=6392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210483801.221:63): user pid=6392 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210484401.232:64): user pid=6815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210484401.232:65): user pid=6815 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210484401.232:66): login pid=6815 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210484401.236:67): user pid=6815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210484401.267:68): user pid=6815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210484401.267:69): user pid=6815 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210485001.278:70): user pid=7299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210485001.279:71): user pid=7299 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210485001.279:72): login pid=7299 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210485001.284:73): user pid=7299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210485001.295:74): user pid=7299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210485001.296:75): user pid=7299 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210485601.303:76): user pid=7771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210485601.303:77): user pid=7771 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210485601.303:78): login pid=7771 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210485601.309:79): user pid=7771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210485601.407:80): user pid=7771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210485601.407:81): user pid=7771 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210485661.423:82): user pid=7814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210485661.424:83): user pid=7814 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210485661.424:84): login pid=7814 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210485661.427:85): user pid=7814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210485661.434:86): user pid=7814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210485661.434:87): user pid=7814 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210486201.441:88): user pid=8186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210486201.441:89): user pid=8186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210486201.441:90): login pid=8186 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210486201.448:91): user pid=8186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210486201.457:92): user pid=8186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210486201.457:93): user pid=8186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210486801.470:94): user pid=8704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210486801.470:95): user pid=8704 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210486801.470:96): login pid=8704 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210486801.477:97): user pid=8704 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210486801.491:98): user pid=8704 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210486801.491:99): user pid=8704 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210487093.202:100): user pid=9279 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210487093.205:101): user pid=9279 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210487093.294:102): user pid=9279 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210487093.294:103): user pid=9279 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210487401.510:104): user pid=9740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210487401.510:105): user pid=9740 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210487401.511:106): login pid=9740 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210487401.526:107): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210487401.538:108): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210487401.538:109): user pid=9740 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210487527.071:110): user pid=9279 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210487527.073:111): user pid=9279 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210488001.552:112): user pid=10203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210488001.553:113): user pid=10203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210488001.554:114): login pid=10203 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210488001.559:115): user pid=10203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210488001.575:116): user pid=10203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210488001.575:117): user pid=10203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210488601.589:118): user pid=10732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210488601.589:119): user pid=10732 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210488601.590:120): login pid=10732 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210488601.594:121): user pid=10732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210488601.604:122): user pid=10732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210488601.604:123): user pid=10732 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210489201.618:124): user pid=11203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210489201.618:125): user pid=11203 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210489201.619:126): login pid=11203 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210489201.624:127): user pid=11203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210489201.636:128): user pid=11203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210489201.637:129): user pid=11203 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210489261.646:130): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210489261.647:131): user pid=11300 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210489261.647:132): login pid=11300 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210489261.651:133): user pid=11300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210489261.667:134): user pid=11300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210489261.667:135): user pid=11300 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210489801.679:136): user pid=11709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210489801.680:137): user pid=11709 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210489801.680:138): login pid=11709 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210489801.685:139): user pid=11709 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210489801.694:140): user pid=11709 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210489801.695:141): user pid=11709 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210490401.707:142): user pid=12267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210490401.708:143): user pid=12267 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210490401.708:144): login pid=12267 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210490401.714:145): user pid=12267 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210490401.729:146): user pid=12267 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210490401.729:147): user pid=12267 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210490729.396:148): user pid=12530 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210490729.405:149): user pid=12530 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210490729.417:150): user pid=12530 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210490729.417:151): user pid=12530 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210491001.745:152): user pid=12778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210491001.745:153): user pid=12778 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210491001.746:154): login pid=12778 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210491001.751:155): user pid=12778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210491001.762:156): user pid=12778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210491001.762:157): user pid=12778 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210491106.850:158): user pid=12530 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210491106.850:159): user pid=12530 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210491305.720:160): user pid=13065 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210491305.729:161): user pid=13065 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210491305.750:162): user pid=13065 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210491305.751:163): user pid=13065 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210491386.422:164): user pid=13065 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210491386.423:165): user pid=13065 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210491601.783:166): user pid=13427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210491601.784:167): user pid=13427 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210491601.784:168): login pid=13427 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210491601.790:169): user pid=13427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210491601.841:170): user pid=13427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210491601.842:171): user pid=13427 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210491919.357:172): user pid=13658 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210491919.363:173): user pid=13658 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210491919.376:174): user pid=13658 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210491919.376:175): user pid=13658 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210491927.505:176): user pid=13658 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210491927.505:177): user pid=13658 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210492201.857:178): user pid=13959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210492201.859:179): user pid=13959 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210492201.859:180): login pid=13959 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210492201.865:181): user pid=13959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210492201.876:182): user pid=13959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210492201.877:183): user pid=13959 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210492801.889:184): user pid=14412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210492801.890:185): user pid=14412 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210492801.890:186): login pid=14412 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210492801.895:187): user pid=14412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210492801.910:188): user pid=14412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210492801.910:189): user pid=14412 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210492861.920:190): user pid=14455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210492861.920:191): user pid=14455 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210492861.921:192): login pid=14455 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210492861.926:193): user pid=14455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210492861.934:194): user pid=14455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210492861.934:195): user pid=14455 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210493401.947:196): user pid=15037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210493401.947:197): user pid=15037 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210493401.948:198): login pid=15037 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210493401.953:199): user pid=15037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210493401.963:200): user pid=15037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210493401.963:201): user pid=15037 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210494001.977:202): user pid=16902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210494001.977:203): user pid=16902 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210494001.978:204): login pid=16902 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210494001.982:205): user pid=16902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210494001.998:206): user pid=16902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210494001.998:207): user pid=16902 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210494601.011:208): user pid=17426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210494601.011:209): user pid=17426 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210494601.012:210): login pid=17426 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210494601.017:211): user pid=17426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210494601.033:212): user pid=17426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210494601.033:213): user pid=17426 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210495201.047:214): user pid=17847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210495201.047:215): user pid=17847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210495201.048:216): login pid=17847 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210495201.054:217): user pid=17847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210495201.063:218): user pid=17847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210495201.063:219): user pid=17847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210495801.076:220): user pid=18257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210495801.076:221): user pid=18257 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210495801.077:222): login pid=18257 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210495801.082:223): user pid=18257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210495801.095:224): user pid=18257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210495801.095:225): user pid=18257 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210496401.106:226): user pid=18660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210496401.107:227): user pid=18660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210496401.107:228): login pid=18660 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210496401.111:229): user pid=18660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210496401.126:230): user pid=18660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210496401.126:231): user pid=18660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210496461.136:232): user pid=18703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210496461.137:233): user pid=18703 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210496461.137:234): login pid=18703 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210496461.141:235): user pid=18703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210496461.150:236): user pid=18703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210496461.151:237): user pid=18703 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210497001.162:238): user pid=19081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210497001.163:239): user pid=19081 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210497001.163:240): login pid=19081 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210497001.167:241): user pid=19081 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210497001.176:242): user pid=19081 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210497001.176:243): user pid=19081 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210497601.188:244): user pid=19490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210497601.188:245): user pid=19490 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210497601.188:246): login pid=19490 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210497601.192:247): user pid=19490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210497601.210:248): user pid=19490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210497601.211:249): user pid=19490 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210498201.222:250): user pid=19893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210498201.223:251): user pid=19893 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210498201.223:252): login pid=19893 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210498201.227:253): user pid=19893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210498201.242:254): user pid=19893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210498201.242:255): user pid=19893 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210498801.254:256): user pid=20314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210498801.255:257): user pid=20314 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210498801.255:258): login pid=20314 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210498801.261:259): user pid=20314 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210498801.273:260): user pid=20314 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210498801.273:261): user pid=20314 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210499312.863:262): user pid=20879 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210499312.872:263): user pid=20879 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210499312.884:264): user pid=20879 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210499312.884:265): user pid=20879 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210499401.285:266): user pid=21008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210499401.287:267): user pid=21008 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210499401.287:268): login pid=21008 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210499401.296:269): user pid=21008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210499401.313:270): user pid=21008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210499401.313:271): user pid=21008 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210499407.729:272): user pid=20879 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210499407.729:273): user pid=20879 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210499578.314:274): user pid=21184 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210499578.320:275): user pid=21184 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210499578.333:276): user pid=21184 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210499578.333:277): user pid=21184 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210499629.486:278): user pid=21306 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210499629.492:279): user pid=21306 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210499629.509:280): user pid=21306 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210499629.509:281): user pid=21306 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210500001.326:282): user pid=21658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210500001.327:283): user pid=21658 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210500001.327:284): login pid=21658 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210500001.334:285): user pid=21658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210500001.344:286): user pid=21658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210500001.344:287): user pid=21658 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210500061.369:288): user pid=21705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210500061.369:289): user pid=21705 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210500061.370:290): login pid=21705 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210500061.375:291): user pid=21705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210500061.384:292): user pid=21705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210500061.384:293): user pid=21705 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210500601.408:294): user pid=22256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210500601.409:295): user pid=22256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210500601.409:296): login pid=22256 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210500601.415:297): user pid=22256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210500601.428:298): user pid=22256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210500601.428:299): user pid=22256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210501201.440:300): user pid=22766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210501201.440:301): user pid=22766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210501201.440:302): login pid=22766 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210501201.446:303): user pid=22766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210501201.458:304): user pid=22766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210501201.458:305): user pid=22766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210501558.020:306): user pid=21306 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210501558.021:307): user pid=21306 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210501583.343:308): user pid=21184 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210501583.343:309): user pid=21184 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210501801.477:310): user pid=23597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210501801.478:311): user pid=23597 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210501801.478:312): login pid=23597 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210501801.485:313): user pid=23597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210501801.497:314): user pid=23597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210501801.498:315): user pid=23597 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210502401.511:316): user pid=24062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210502401.512:317): user pid=24062 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210502401.513:318): login pid=24062 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210502401.518:319): user pid=24062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210502401.531:320): user pid=24062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210502401.531:321): user pid=24062 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210503001.541:322): user pid=24665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210503001.542:323): user pid=24665 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210503001.542:324): login pid=24665 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210503001.550:325): user pid=24665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210503001.617:326): user pid=24665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210503001.617:327): user pid=24665 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210503113.855:328): user pid=24781 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210503113.855:329): user pid=24781 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210503113.903:330): user pid=24781 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1210503114.278:331): user pid=24781 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_PROMISCUOUS msg=audit(1210503120.454:332): dev=vnet0 prom=256 old_prom=0 auid=4294967295 >type=SYSCALL msg=audit(1210503120.454:332): arch=c000003e syscall=16 success=yes exit=0 a0=5 a1=89a2 a2=7fffbf990530 a3=639632 items=0 ppid=1 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:initrc_t:s0 key=(null) >type=USER_ACCT msg=audit(1210503601.879:333): user pid=25256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210503601.881:334): user pid=25256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210503601.881:335): login pid=25256 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210503601.901:336): user pid=25256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210503602.021:337): user pid=25256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210503602.021:338): user pid=25256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210503661.039:339): user pid=25301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210503661.040:340): user pid=25301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210503661.040:341): login pid=25301 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210503661.049:342): user pid=25301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210503661.172:343): user pid=25301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210503661.172:344): user pid=25301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210503768.612:345): user pid=25407 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=USER_ACCT msg=audit(1210503768.615:346): user pid=25407 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=CRED_ACQ msg=audit(1210503768.743:347): user pid=25407 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=LOGIN msg=audit(1210503768.744:348): login pid=25407 uid=0 old auid=4294967295 new auid=500 >type=USER_START msg=audit(1210503768.744:349): user pid=25407 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=CRED_REFR msg=audit(1210503768.745:350): user pid=25418 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=CRED_DISP msg=audit(1210503769.299:351): user pid=25407 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=USER_END msg=audit(1210503769.300:352): user pid=25407 uid=0 auid=500 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/sshd" (hostname=192.168.122.88, addr=192.168.122.88, terminal=ssh res=success)' >type=ANOM_ABEND msg=audit(1210503929.739:353): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:unconfined_execmem_t:s0 pid=24804 comm="qemu-kvm" sig=11 >type=ANOM_PROMISCUOUS msg=audit(1210503929.811:354): dev=vnet0 prom=0 old_prom=256 auid=4294967295 >type=USER_AUTH msg=audit(1210504121.669:355): user pid=25878 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1210504121.675:356): user pid=25878 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1210504121.765:357): user pid=25878 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1210504121.766:358): user pid=25878 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_DISP msg=audit(1210504137.478:359): user pid=25878 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1210504137.479:360): user pid=25878 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1210504201.190:361): user pid=25993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210504201.191:362): user pid=25993 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210504201.191:363): login pid=25993 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210504201.195:364): user pid=25993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210504201.208:365): user pid=25993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210504201.208:366): user pid=25993 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210504801.221:367): user pid=26451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210504801.222:368): user pid=26451 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210504801.222:369): login pid=26451 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210504801.227:370): user pid=26451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210504801.235:371): user pid=26451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210504801.236:372): user pid=26451 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210505401.256:373): user pid=26871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210505401.257:374): user pid=26871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210505401.257:375): login pid=26871 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210505401.262:376): user pid=26871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210505401.273:377): user pid=26871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210505401.273:378): user pid=26871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210505779.679:379): user pid=27259 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210505779.687:380): user pid=27259 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210505779.702:381): user pid=27259 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210505779.702:382): user pid=27259 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210505970.077:383): user pid=27259 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210505970.078:384): user pid=27259 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210506001.327:385): user pid=27652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210506001.327:386): user pid=27652 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210506001.328:387): login pid=27652 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210506001.334:388): user pid=27652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210506001.352:389): user pid=27652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210506001.352:390): user pid=27652 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210506601.364:391): user pid=28113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210506601.366:392): user pid=28113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210506601.366:393): login pid=28113 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210506601.370:394): user pid=28113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210506601.380:395): user pid=28113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210506601.380:396): user pid=28113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210506626.039:397): user pid=28165 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210506626.045:398): user pid=28165 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210506626.061:399): user pid=28165 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210506626.061:400): user pid=28165 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210506842.925:401): user pid=28165 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210506842.925:402): user pid=28165 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210507201.395:403): user pid=28892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210507201.396:404): user pid=28892 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210507201.396:405): login pid=28892 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210507201.403:406): user pid=28892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210507201.417:407): user pid=28892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210507201.417:408): user pid=28892 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210507261.429:409): user pid=28936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210507261.429:410): user pid=28936 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210507261.429:411): login pid=28936 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210507261.432:412): user pid=28936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210507261.441:413): user pid=28936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210507261.441:414): user pid=28936 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210507801.455:415): user pid=29434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210507801.456:416): user pid=29434 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210507801.456:417): login pid=29434 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210507801.462:418): user pid=29434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210507801.473:419): user pid=29434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210507801.473:420): user pid=29434 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210508401.491:421): user pid=30113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210508401.492:422): user pid=30113 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210508401.492:423): login pid=30113 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210508401.498:424): user pid=30113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210508401.532:425): user pid=30113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210508401.532:426): user pid=30113 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210509001.546:427): user pid=30528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210509001.546:428): user pid=30528 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210509001.546:429): login pid=30528 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210509001.552:430): user pid=30528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210509001.569:431): user pid=30528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210509001.569:432): user pid=30528 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210509601.583:433): user pid=30955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210509601.584:434): user pid=30955 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210509601.584:435): login pid=30955 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210509601.588:436): user pid=30955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210509601.598:437): user pid=30955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210509601.598:438): user pid=30955 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210510201.611:439): user pid=31418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210510201.612:440): user pid=31418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210510201.612:441): login pid=31418 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210510201.617:442): user pid=31418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210510201.631:443): user pid=31418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210510201.631:444): user pid=31418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210510801.638:445): user pid=31825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210510801.638:446): user pid=31825 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210510801.638:447): login pid=31825 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210510801.644:448): user pid=31825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210510801.652:449): user pid=31825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210510801.652:450): user pid=31825 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210510861.663:451): user pid=31871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210510861.663:452): user pid=31871 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210510861.663:453): login pid=31871 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210510861.667:454): user pid=31871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210510861.675:455): user pid=31871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210510861.675:456): user pid=31871 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210511401.686:457): user pid=32266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210511401.686:458): user pid=32266 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210511401.686:459): login pid=32266 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210511401.692:460): user pid=32266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210511401.708:461): user pid=32266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210511401.708:462): user pid=32266 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210512001.720:463): user pid=316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210512001.720:464): user pid=316 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210512001.720:465): login pid=316 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210512001.728:466): user pid=316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210512001.741:467): user pid=316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210512001.741:468): user pid=316 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210512601.756:469): user pid=1053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210512601.756:470): user pid=1053 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210512601.757:471): login pid=1053 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210512601.762:472): user pid=1053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210512601.797:473): user pid=1053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210512601.797:474): user pid=1053 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210512863.207:475): user pid=1267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210512863.211:476): user pid=1267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210512863.227:477): user pid=1267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210512863.228:478): user pid=1267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210513201.814:479): user pid=1784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210513201.815:480): user pid=1784 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210513201.815:481): login pid=1784 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210513201.821:482): user pid=1784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210513201.835:483): user pid=1784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210513201.835:484): user pid=1784 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210513801.857:485): user pid=2260 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210513801.858:486): user pid=2260 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210513801.858:487): login pid=2260 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210513801.867:488): user pid=2260 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210513801.876:489): user pid=2260 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210513801.876:490): user pid=2260 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210513862.398:491): user pid=1267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210513862.402:492): user pid=1267 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210513868.854:493): user pid=2660 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210513868.855:494): user pid=2660 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210513871.688:495): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2586 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210513879.131:5926): auditd normal halt, sending auid=4294967295 pid=2639 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210539198.809:9971): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2040 res=success >type=CONFIG_CHANGE msg=audit(1210539198.909:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210539198.909:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210539198.955:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210539198.955:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210539215.969:9): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210539215.969:10): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210539216.969:11): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210539216.971:12): user pid=2386 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210539217.832:13): user pid=2418 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210539218.033:14): user pid=2418 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1210539601.444:15): user pid=2954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210539601.445:16): user pid=2954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210539601.445:17): login pid=2954 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210539601.450:18): user pid=2954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210539601.478:19): user pid=2954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210539601.478:20): user pid=2954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210539661.483:21): user pid=3001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210539661.483:22): user pid=3001 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210539661.483:23): login pid=3001 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210539661.491:24): user pid=3001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210539661.580:25): user pid=3001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210539661.581:26): user pid=3001 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210540034.065:27): user pid=2612 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210540034.071:28): user pid=2612 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210540034.071:29): user pid=2612 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210540034.077:30): login pid=2612 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210540034.110:31): user pid=2612 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210540034.218:32): user pid=2612 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210540034.219:33): user pid=2612 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210540112.753:34): user pid=3868 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210540112.759:35): user pid=3868 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210540112.832:36): user pid=3868 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210540112.832:37): user pid=3868 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210540201.598:38): user pid=4023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210540201.600:39): user pid=4023 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210540201.600:40): login pid=4023 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210540201.605:41): user pid=4023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210540201.617:42): user pid=4023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210540201.617:43): user pid=4023 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210540246.491:44): user pid=3868 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210540246.491:45): user pid=3868 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210540313.087:46): user pid=4145 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210540313.092:47): user pid=4145 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210540313.108:48): user pid=4145 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210540313.108:49): user pid=4145 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210540335.896:50): user pid=4236 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210540335.918:51): user pid=4236 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210540335.961:52): user pid=4236 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210540335.962:53): user pid=4236 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1210540479.028:54): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4620 comm="npviewer.bin" sig=6 >type=CRED_DISP msg=audit(1210540660.798:55): user pid=4236 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210540660.859:56): user pid=4236 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210540801.786:57): user pid=5099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210540801.802:58): user pid=5099 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210540801.803:59): login pid=5099 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210540801.819:60): user pid=5099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210540801.990:61): user pid=5099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210540801.991:62): user pid=5099 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210541115.383:63): user pid=4145 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210541115.384:64): user pid=4145 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210541218.840:65): user pid=2612 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210541218.840:66): user pid=2612 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210541222.133:67): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2542 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210541229.485:9972): auditd normal halt, sending auid=4294967295 pid=5760 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210543831.688:765): auditd start, ver=1.7.2 format=raw kernel=2.6.25-wl auid=4294967295 pid=2134 res=success >type=CONFIG_CHANGE msg=audit(1210543831.835:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_START msg=audit(1210543843.394:5): user pid=2477 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210543843.394:6): user pid=2477 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210543845.151:7): user pid=2477 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210543845.152:8): user pid=2477 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210543845.509:9): user pid=2504 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210543845.670:10): user pid=2504 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210543854.656:11): user pid=2632 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210543854.659:12): user pid=2632 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210543854.661:13): login pid=2632 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210543854.725:14): user pid=2632 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210543854.735:15): user pid=2632 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210543854.748:16): user pid=2632 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210543854.748:17): user pid=2632 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210543889.760:18): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210543889.760:19): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210543890.100:20): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210543890.100:21): user pid=2871 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210543909.360:22): user pid=2927 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210543909.366:23): user pid=2927 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210543909.367:24): user pid=2927 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210543909.371:25): login pid=2927 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1210543909.422:26): user pid=2927 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210543909.508:27): user pid=2927 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210543909.509:28): user pid=2927 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210544176.993:29): user pid=11370 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210544176.997:30): user pid=11370 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210544177.012:31): user pid=11370 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210544177.014:32): user pid=11370 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210544177.014:33): user pid=11370 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_CMD msg=audit(1210544177.014:34): user pid=11370 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/bbaetz/src/iwlwifi-2.6" cmd="/usr/bin/time" (terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210544194.289:35): user pid=11965 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210544194.292:36): user pid=11965 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210544194.457:37): user pid=11965 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210544194.457:38): user pid=11965 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210544401.176:39): user pid=11965 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210544401.178:40): user pid=11965 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210544401.492:41): user pid=2927 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210544401.492:42): user pid=2927 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210544401.744:43): user pid=17505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210544401.747:44): user pid=17505 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210544401.747:45): login pid=17505 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1210544401.758:46): user pid=17505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210544401.777:47): user pid=2632 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210544401.779:48): user pid=2632 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210544401.845:49): user pid=17505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210544401.846:50): user pid=17505 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1210544403.362:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2903 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210544414.928:766): auditd normal halt, sending auid=0 pid=17764 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210544479.041:2335): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2071 res=success >type=CONFIG_CHANGE msg=audit(1210544479.141:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210544479.141:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210544479.186:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210544479.186:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210544489.721:9): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210544489.721:10): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210544490.746:11): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210544490.746:12): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210544491.317:13): user pid=2448 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210544491.480:14): user pid=2448 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210544518.268:15): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210544518.274:16): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210544518.274:17): user pid=2652 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210544518.283:18): login pid=2652 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210544518.321:19): user pid=2652 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210544518.407:20): user pid=2652 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210544518.408:21): user pid=2652 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210544556.255:22): user pid=3207 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210544556.261:23): user pid=3207 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210544556.347:24): user pid=3207 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210544556.347:25): user pid=3207 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210544629.267:26): user pid=3207 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210544629.268:27): user pid=3207 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210545001.144:28): user pid=3675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210545001.146:29): user pid=3675 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210545001.146:30): login pid=3675 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210545001.154:31): user pid=3675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210545001.196:32): user pid=3675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210545001.196:33): user pid=3675 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210545601.211:34): user pid=4184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210545601.212:35): user pid=4184 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210545601.212:36): login pid=4184 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210545601.218:37): user pid=4184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210545601.229:38): user pid=4184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210545601.229:39): user pid=4184 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210546201.244:40): user pid=4805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210546201.246:41): user pid=4805 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210546201.246:42): login pid=4805 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210546201.253:43): user pid=4805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210546201.264:44): user pid=4805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210546201.265:45): user pid=4805 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210546801.278:46): user pid=5555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210546801.280:47): user pid=5555 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210546801.280:48): login pid=5555 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210546801.287:49): user pid=5555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210546801.300:50): user pid=5555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210546801.300:51): user pid=5555 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210546861.311:52): user pid=5632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210546861.311:53): user pid=5632 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210546861.311:54): login pid=5632 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210546861.316:55): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210546861.385:56): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210546861.386:57): user pid=5632 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210547111.828:58): user pid=2652 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210547111.828:59): user pid=2652 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210547113.849:60): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2577 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210547122.037:2336): auditd normal halt, sending auid=4294967295 pid=6448 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210557649.108:5083): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2068 res=success >type=CONFIG_CHANGE msg=audit(1210557649.207:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210557649.207:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210557649.253:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210557649.253:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210557660.232:9): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210557660.232:10): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210557661.946:11): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210557661.946:12): user pid=2419 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210557661.985:13): user pid=2447 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210557662.191:14): user pid=2447 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1210557662.397:15): user pid=2448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210557662.398:16): user pid=2448 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210557662.398:17): login pid=2448 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210557662.403:18): user pid=2448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210557662.738:19): user pid=2448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210557662.738:20): user pid=2448 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210557684.049:21): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210557684.060:22): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210557684.062:23): user pid=2658 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210557684.069:24): login pid=2658 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210557684.140:25): user pid=2658 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210557684.235:26): user pid=2658 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210557684.236:27): user pid=2658 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210558201.751:28): user pid=3954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210558201.752:29): user pid=3954 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210558201.765:30): login pid=3954 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210558201.771:31): user pid=3954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210558201.842:32): user pid=3954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210558201.842:33): user pid=3954 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210558801.111:34): user pid=4389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210558801.112:35): user pid=4389 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210558801.113:36): login pid=4389 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210558801.117:37): user pid=4389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210558801.133:38): user pid=4389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210558801.133:39): user pid=4389 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210559401.146:40): user pid=4860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210559401.148:41): user pid=4860 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210559401.148:42): login pid=4860 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210559401.153:43): user pid=4860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210559401.169:44): user pid=4860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210559401.170:45): user pid=4860 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210560001.182:46): user pid=5283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210560001.182:47): user pid=5283 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210560001.183:48): login pid=5283 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210560001.192:49): user pid=5283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210560001.207:50): user pid=5283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210560001.208:51): user pid=5283 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210560478.500:52): user pid=5935 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210565437.546:53): user pid=5977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210565437.547:54): user pid=5977 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210565437.547:55): login pid=5977 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210565437.559:56): user pid=5977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210565437.585:57): user pid=5977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210565437.585:58): user pid=5977 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USYS_CONFIG msg=audit(1210565437.999:59): user pid=6073 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=DAEMON_START msg=audit(1210565517.187:420): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2097 res=success >type=CONFIG_CHANGE msg=audit(1210565517.288:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210565517.288:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210565517.333:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210565517.333:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210565534.141:9): user pid=2443 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210565534.141:10): user pid=2443 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210565535.873:11): user pid=2443 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210565535.873:12): user pid=2443 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210565535.915:13): user pid=2471 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210565536.094:14): user pid=2471 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210565879.190:15): user pid=2667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210565879.202:16): user pid=2667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210565879.204:17): user pid=2667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210565879.213:18): login pid=2667 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210565879.295:19): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210565879.412:20): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210565879.415:21): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210565900.448:22): user pid=2601 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1210565900.506:23): user pid=2601 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="ROO" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1210565902.642:24): user pid=2601 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210565902.654:25): user pid=2601 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210565902.658:26): login pid=2601 uid=0 old auid=4294967295 new auid=0 >type=USER_ROLE_CHANGE msg=audit(1210565902.684:27): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210565902.699:28): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210565902.699:29): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210565902.700:30): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210565915.436:31): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210565915.440:32): user pid=2601 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210565920.551:33): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210565920.551:34): user pid=2667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210565939.498:35): user pid=3667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210565939.507:36): user pid=3667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210565939.507:37): user pid=3667 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210565939.511:38): login pid=3667 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210565939.540:39): user pid=3667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210565939.551:40): user pid=3667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210565939.552:41): user pid=3667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210566001.702:42): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210566001.704:43): user pid=4360 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210566001.704:44): login pid=4360 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210566001.710:45): user pid=4360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210566001.752:46): user pid=4360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210566001.752:47): user pid=4360 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210566601.767:48): user pid=5309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210566601.768:49): user pid=5309 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210566601.768:50): login pid=5309 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210566601.773:51): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210566601.788:52): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210566601.788:53): user pid=5309 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210567201.805:54): user pid=6355 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210567201.805:55): user pid=6355 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210567201.806:56): login pid=6355 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210567201.810:57): user pid=6355 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210567201.821:58): user pid=6355 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210567201.821:59): user pid=6355 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210567801.836:60): user pid=7072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210567801.837:61): user pid=7072 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210567801.838:62): login pid=7072 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210567801.842:63): user pid=7072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210567801.853:64): user pid=7072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210567801.853:65): user pid=7072 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210568401.867:66): user pid=7572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210568401.868:67): user pid=7572 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210568401.868:68): login pid=7572 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210568401.873:69): user pid=7572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210568401.887:70): user pid=7572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210568401.888:71): user pid=7572 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210568461.897:72): user pid=7615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210568461.898:73): user pid=7615 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210568461.898:74): login pid=7615 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210568461.903:75): user pid=7615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210568461.985:76): user pid=7615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210568461.986:77): user pid=7615 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210569001.998:78): user pid=7981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210569001.998:79): user pid=7981 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210569001.999:80): login pid=7981 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210569002.002:81): user pid=7981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210569002.011:82): user pid=7981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210569002.011:83): user pid=7981 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210569601.024:84): user pid=8599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210569601.024:85): user pid=8599 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210569601.024:86): login pid=8599 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210569601.030:87): user pid=8599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210569601.040:88): user pid=8599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210569601.041:89): user pid=8599 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210570201.069:90): user pid=9212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210570201.071:91): user pid=9212 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210570201.071:92): login pid=9212 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210570201.076:93): user pid=9212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210570201.089:94): user pid=9212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210570201.089:95): user pid=9212 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210570432.551:96): user pid=9455 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1210570432.558:97): user pid=9455 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1210570432.613:98): user pid=9455 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_ACQ msg=audit(1210570432.613:99): user pid=9455 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_DISP msg=audit(1210570529.090:100): user pid=9455 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1210570529.091:101): user pid=9455 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1210570801.097:102): user pid=9928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210570801.097:103): user pid=9928 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210570801.097:104): login pid=9928 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210570801.103:105): user pid=9928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210570801.115:106): user pid=9928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210570801.115:107): user pid=9928 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210571401.126:108): user pid=10508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210571401.126:109): user pid=10508 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210571401.127:110): login pid=10508 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210571401.135:111): user pid=10508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210571401.144:112): user pid=10508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210571401.144:113): user pid=10508 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210572001.162:114): user pid=10973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210572001.163:115): user pid=10973 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210572001.163:116): login pid=10973 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210572001.167:117): user pid=10973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210572001.179:118): user pid=10973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210572001.180:119): user pid=10973 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210572061.207:120): user pid=11018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210572061.208:121): user pid=11018 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210572061.208:122): login pid=11018 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210572061.229:123): user pid=11018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210572061.260:124): user pid=11018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210572061.261:125): user pid=11018 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210572601.273:126): user pid=11393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210572601.274:127): user pid=11393 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210572601.274:128): login pid=11393 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210572601.279:129): user pid=11393 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210572601.290:130): user pid=11393 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210572601.291:131): user pid=11393 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210573201.302:132): user pid=12004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210573201.303:133): user pid=12004 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210573201.303:134): login pid=12004 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210573201.309:135): user pid=12004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210573201.325:136): user pid=12004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210573201.325:137): user pid=12004 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210573801.337:138): user pid=12407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210573801.338:139): user pid=12407 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210573801.338:140): login pid=12407 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210573801.342:141): user pid=12407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210573801.351:142): user pid=12407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210573801.351:143): user pid=12407 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210574136.601:144): user pid=12757 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210574136.610:145): user pid=12757 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210574136.645:146): user pid=12757 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210574136.645:147): user pid=12757 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210574149.882:148): user pid=12844 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210574149.888:149): user pid=12844 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210574149.906:150): user pid=12844 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210574149.906:151): user pid=12844 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210574159.638:152): user pid=12844 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210574159.639:153): user pid=12844 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210574221.601:154): user pid=12757 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210574221.601:155): user pid=12757 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210574401.367:156): user pid=13146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210574401.368:157): user pid=13146 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210574401.369:158): login pid=13146 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210574401.373:159): user pid=13146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210574401.383:160): user pid=13146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210574401.384:161): user pid=13146 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210575001.398:162): user pid=13561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210575001.398:163): user pid=13561 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210575001.399:164): login pid=13561 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210575001.407:165): user pid=13561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210575001.416:166): user pid=13561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210575001.416:167): user pid=13561 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210575601.429:168): user pid=13964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210575601.430:169): user pid=13964 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210575601.431:170): login pid=13964 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210575601.437:171): user pid=13964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210575601.447:172): user pid=13964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210575601.447:173): user pid=13964 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210575661.457:174): user pid=14007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210575661.458:175): user pid=14007 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210575661.458:176): login pid=14007 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210575661.465:177): user pid=14007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210575661.472:178): user pid=14007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210575661.473:179): user pid=14007 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210576201.483:180): user pid=14373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210576201.483:181): user pid=14373 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210576201.484:182): login pid=14373 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210576201.489:183): user pid=14373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210576201.496:184): user pid=14373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210576201.496:185): user pid=14373 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210576801.514:186): user pid=15094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210576801.514:187): user pid=15094 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210576801.515:188): login pid=15094 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210576801.524:189): user pid=15094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210576801.533:190): user pid=15094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210576801.534:191): user pid=15094 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210577401.545:192): user pid=15767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210577401.545:193): user pid=15767 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210577401.545:194): login pid=15767 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210577401.550:195): user pid=15767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210577401.575:196): user pid=15767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210577401.575:197): user pid=15767 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210578001.584:198): user pid=16808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210578001.585:199): user pid=16808 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210578001.585:200): login pid=16808 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210578001.592:201): user pid=16808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210578001.633:202): user pid=16808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210578001.633:203): user pid=16808 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210578601.643:204): user pid=17211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210578601.644:205): user pid=17211 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210578601.644:206): login pid=17211 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210578601.651:207): user pid=17211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210578601.659:208): user pid=17211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210578601.659:209): user pid=17211 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210579201.673:210): user pid=17614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210579201.674:211): user pid=17614 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210579201.674:212): login pid=17614 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210579201.682:213): user pid=17614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210579201.691:214): user pid=17614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210579201.691:215): user pid=17614 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210579261.701:216): user pid=17657 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210579261.701:217): user pid=17657 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210579261.702:218): login pid=17657 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210579261.710:219): user pid=17657 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210579261.716:220): user pid=17657 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210579261.716:221): user pid=17657 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210579801.726:222): user pid=18035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210579801.727:223): user pid=18035 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210579801.727:224): login pid=18035 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210579801.732:225): user pid=18035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210579801.753:226): user pid=18035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210579801.753:227): user pid=18035 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210580401.764:228): user pid=18634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210580401.764:229): user pid=18634 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210580401.765:230): login pid=18634 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210580401.772:231): user pid=18634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210580401.779:232): user pid=18634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210580401.780:233): user pid=18634 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210581001.792:234): user pid=19333 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210581001.793:235): user pid=19333 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210581001.794:236): login pid=19333 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210581001.801:237): user pid=19333 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210581001.821:238): user pid=19333 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210581001.821:239): user pid=19333 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210581601.833:240): user pid=19748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210581601.834:241): user pid=19748 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210581601.834:242): login pid=19748 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210581601.842:243): user pid=19748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210581601.855:244): user pid=19748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210581601.856:245): user pid=19748 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210582201.870:246): user pid=20208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210582201.871:247): user pid=20208 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210582201.871:248): login pid=20208 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210582201.881:249): user pid=20208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210582201.908:250): user pid=20208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210582201.908:251): user pid=20208 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210582801.917:252): user pid=20717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210582801.917:253): user pid=20717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210582801.918:254): login pid=20717 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210582801.923:255): user pid=20717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210582801.931:256): user pid=20717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210582801.931:257): user pid=20717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210582861.941:258): user pid=20760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210582861.941:259): user pid=20760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210582861.941:260): login pid=20760 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210582861.950:261): user pid=20760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210582861.956:262): user pid=20760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210582861.956:263): user pid=20760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210583401.965:264): user pid=21313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210583401.965:265): user pid=21313 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210583401.965:266): login pid=21313 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210583401.974:267): user pid=21313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210583401.982:268): user pid=21313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210583401.982:269): user pid=21313 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210584001.997:270): user pid=21912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210584001.998:271): user pid=21912 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210584001.999:272): login pid=21912 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210584002.007:273): user pid=21912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210584002.015:274): user pid=21912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210584002.015:275): user pid=21912 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210584601.029:276): user pid=22315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210584601.030:277): user pid=22315 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210584601.030:278): login pid=22315 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210584601.036:279): user pid=22315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210584601.046:280): user pid=22315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210584601.046:281): user pid=22315 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210585201.058:282): user pid=22730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210585201.058:283): user pid=22730 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210585201.059:284): login pid=22730 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210585201.066:285): user pid=22730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210585201.074:286): user pid=22730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210585201.074:287): user pid=22730 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210585801.084:288): user pid=23133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210585801.084:289): user pid=23133 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210585801.084:290): login pid=23133 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210585801.092:291): user pid=23133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210585801.100:292): user pid=23133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210585801.100:293): user pid=23133 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210586401.113:294): user pid=23536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210586401.114:295): user pid=23536 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210586401.114:296): login pid=23536 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210586401.122:297): user pid=23536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210586401.130:298): user pid=23536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210586401.131:299): user pid=23536 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210586461.141:300): user pid=23579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210586461.141:301): user pid=23579 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210586461.141:302): login pid=23579 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210586461.149:303): user pid=23579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210586461.156:304): user pid=23579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210586461.156:305): user pid=23579 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210587001.166:306): user pid=23957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210587001.167:307): user pid=23957 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210587001.167:308): login pid=23957 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210587001.171:309): user pid=23957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210587001.178:310): user pid=23957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210587001.178:311): user pid=23957 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210587601.189:312): user pid=24556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210587601.189:313): user pid=24556 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210587601.189:314): login pid=24556 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210587601.195:315): user pid=24556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210587601.208:316): user pid=24556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210587601.208:317): user pid=24556 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210588201.221:318): user pid=25181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210588201.222:319): user pid=25181 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210588201.222:320): login pid=25181 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210588201.231:321): user pid=25181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210588201.239:322): user pid=25181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210588201.240:323): user pid=25181 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210588801.253:324): user pid=25631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210588801.254:325): user pid=25631 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210588801.254:326): login pid=25631 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210588801.262:327): user pid=25631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210588801.271:328): user pid=25631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210588801.271:329): user pid=25631 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210589401.284:330): user pid=26111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210589401.284:331): user pid=26111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210589401.285:332): login pid=26111 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210589401.290:333): user pid=26111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210589401.298:334): user pid=26111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210589401.298:335): user pid=26111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210590001.318:336): user pid=27190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210590001.320:337): user pid=27190 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210590001.320:338): login pid=27190 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210590001.326:339): user pid=27190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210590001.338:340): user pid=27190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210590001.338:341): user pid=27190 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210590061.348:342): user pid=27233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210590061.349:343): user pid=27233 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210590061.350:344): login pid=27233 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210590061.358:345): user pid=27233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210590061.366:346): user pid=27233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210590061.366:347): user pid=27233 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210590601.379:348): user pid=27674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210590601.380:349): user pid=27674 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210590601.380:350): login pid=27674 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210590601.389:351): user pid=27674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210590601.397:352): user pid=27674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210590601.397:353): user pid=27674 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210591201.410:354): user pid=28311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210591201.411:355): user pid=28311 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210591201.411:356): login pid=28311 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210591201.419:357): user pid=28311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210591201.428:358): user pid=28311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210591201.429:359): user pid=28311 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210591801.441:360): user pid=28735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210591801.442:361): user pid=28735 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210591801.442:362): login pid=28735 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210591801.447:363): user pid=28735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210591801.455:364): user pid=28735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210591801.455:365): user pid=28735 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210592401.468:366): user pid=29307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210592401.469:367): user pid=29307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210592401.469:368): login pid=29307 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210592401.477:369): user pid=29307 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210592401.488:370): user pid=29307 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210592401.488:371): user pid=29307 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210593001.501:372): user pid=29717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210593001.502:373): user pid=29717 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210593001.502:374): login pid=29717 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210593001.510:375): user pid=29717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210593001.517:376): user pid=29717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210593001.518:377): user pid=29717 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210593601.532:378): user pid=30170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210593601.532:379): user pid=30170 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210593601.532:380): login pid=30170 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210593601.541:381): user pid=30170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210593601.550:382): user pid=30170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210593601.550:383): user pid=30170 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210593661.559:384): user pid=30213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210593661.560:385): user pid=30213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210593661.560:386): login pid=30213 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210593661.569:387): user pid=30213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210593661.574:388): user pid=30213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210593661.575:389): user pid=30213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210594201.586:390): user pid=30644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210594201.586:391): user pid=30644 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210594201.586:392): login pid=30644 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210594201.595:393): user pid=30644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210594201.617:394): user pid=30644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210594201.617:395): user pid=30644 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210594801.631:396): user pid=31256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210594801.632:397): user pid=31256 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210594801.632:398): login pid=31256 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210594801.641:399): user pid=31256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210594801.649:400): user pid=31256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210594801.649:401): user pid=31256 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210595401.661:402): user pid=31701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210595401.662:403): user pid=31701 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210595401.662:404): login pid=31701 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210595401.669:405): user pid=31701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210595401.676:406): user pid=31701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210595401.677:407): user pid=31701 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210596001.692:408): user pid=32276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210596001.693:409): user pid=32276 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210596001.693:410): login pid=32276 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210596001.700:411): user pid=32276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210596001.709:412): user pid=32276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210596001.709:413): user pid=32276 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210596601.721:414): user pid=32682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210596601.722:415): user pid=32682 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210596601.722:416): login pid=32682 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210596601.726:417): user pid=32682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210596601.733:418): user pid=32682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210596601.733:419): user pid=32682 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210597201.744:420): user pid=650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210597201.744:421): user pid=650 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210597201.744:422): login pid=650 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210597201.751:423): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210597201.759:424): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210597201.759:425): user pid=650 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210597261.769:426): user pid=693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210597261.770:427): user pid=693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210597261.770:428): login pid=693 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210597261.778:429): user pid=693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210597261.786:430): user pid=693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210597261.786:431): user pid=693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210597801.799:432): user pid=1063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210597801.799:433): user pid=1063 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210597801.800:434): login pid=1063 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210597801.804:435): user pid=1063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210597801.812:436): user pid=1063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210597801.812:437): user pid=1063 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210598401.825:438): user pid=1679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210598401.825:439): user pid=1679 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210598401.825:440): login pid=1679 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210598401.831:441): user pid=1679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210598401.838:442): user pid=1679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210598401.838:443): user pid=1679 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210599001.852:444): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210599001.852:445): user pid=2111 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210599001.853:446): login pid=2111 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210599001.859:447): user pid=2111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210599001.868:448): user pid=2111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210599001.868:449): user pid=2111 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210599601.881:450): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210599601.882:451): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210599601.883:452): login pid=2624 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210599601.888:453): user pid=2624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210599601.897:454): user pid=2624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210599601.897:455): user pid=2624 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210600201.905:456): user pid=3032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210600201.907:457): user pid=3032 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210600201.907:458): login pid=3032 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210600201.913:459): user pid=3032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210600201.945:460): user pid=3032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210600201.946:461): user pid=3032 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210600381.961:462): user pid=3174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210600381.962:463): user pid=3174 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210600381.962:464): login pid=3174 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210600381.967:465): user pid=3174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210600382.178:466): user pid=3174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210600382.178:467): user pid=3174 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210600801.184:468): user pid=3500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210600801.185:469): user pid=3500 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210600801.185:470): login pid=3500 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210600801.190:471): user pid=3500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210600801.200:472): user pid=3500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210600801.200:473): user pid=3500 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210600861.205:474): user pid=3544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210600861.205:475): user pid=3544 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210600861.205:476): login pid=3544 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210600861.211:477): user pid=3544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210600861.219:478): user pid=3544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210600861.219:479): user pid=3544 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210601401.224:480): user pid=3945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210601401.225:481): user pid=3945 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210601401.225:482): login pid=3945 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210601401.231:483): user pid=3945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210601401.265:484): user pid=3945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210601401.265:485): user pid=3945 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210602001.271:486): user pid=4570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210602001.272:487): user pid=4570 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210602001.273:488): login pid=4570 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210602001.280:489): user pid=4570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210602001.289:490): user pid=4570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210602001.289:491): user pid=4570 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210602601.297:492): user pid=5253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210602601.297:493): user pid=5253 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210602601.298:494): login pid=5253 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210602601.304:495): user pid=5253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210602601.323:496): user pid=5253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210602601.324:497): user pid=5253 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210603108.144:498): user pid=3667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210603108.144:499): user pid=3667 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210603110.560:500): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2607 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210603117.938:421): auditd normal halt, sending auid=4294967295 pid=6226 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210627620.098:5321): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2041 res=success >type=CONFIG_CHANGE msg=audit(1210627620.198:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210627620.198:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210627620.254:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210627620.254:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210627636.458:9): user pid=2387 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210627636.458:10): user pid=2387 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210627637.761:11): user pid=2387 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210627637.761:12): user pid=2387 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210627638.011:13): user pid=2415 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210627638.290:14): user pid=2415 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210627700.814:15): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210627700.821:16): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210627700.829:17): user pid=2619 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210627700.837:18): login pid=2619 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210627700.897:19): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210627701.034:20): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210627701.036:21): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210627802.034:22): user pid=3659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210627802.035:23): user pid=3659 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210627802.035:24): login pid=3659 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210627802.048:25): user pid=3659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210627802.098:26): user pid=3659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210627802.098:27): user pid=3659 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210628401.115:28): user pid=4297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210628401.117:29): user pid=4297 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210628401.117:30): login pid=4297 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210628401.123:31): user pid=4297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210628401.148:32): user pid=4297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210628401.148:33): user pid=4297 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210629001.163:34): user pid=4766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210629001.163:35): user pid=4766 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210629001.163:36): login pid=4766 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210629001.166:37): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210629001.174:38): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210629001.175:39): user pid=4766 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210629389.725:40): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210629389.725:41): user pid=2619 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210629392.041:42): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2543 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210629400.133:5322): auditd normal halt, sending auid=4294967295 pid=5299 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210652493.965:8684): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2042 res=success >type=CONFIG_CHANGE msg=audit(1210652494.065:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210652494.065:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210652494.111:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210652494.111:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210652507.117:9): user pid=2388 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210652507.117:10): user pid=2388 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210652508.408:11): user pid=2388 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210652508.408:12): user pid=2388 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210652508.723:13): user pid=2415 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210652508.936:14): user pid=2415 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_ACCT msg=audit(1210653001.605:15): user pid=3034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210653001.606:16): user pid=3034 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210653001.606:17): login pid=3034 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210653001.610:18): user pid=3034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210653001.639:19): user pid=3034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210653001.639:20): user pid=3034 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210653226.602:21): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210653226.610:22): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210653226.611:23): user pid=2624 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210653226.615:24): login pid=2624 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210653226.672:25): user pid=2624 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210653226.786:26): user pid=2624 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210653226.787:27): user pid=2624 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210653601.651:28): user pid=4290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210653601.653:29): user pid=4290 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210653601.653:30): login pid=4290 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210653601.659:31): user pid=4290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210653601.672:32): user pid=4290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210653601.672:33): user pid=4290 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210654201.686:34): user pid=4786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210654201.687:35): user pid=4786 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210654201.687:36): login pid=4786 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210654201.692:37): user pid=4786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210654201.702:38): user pid=4786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210654201.703:39): user pid=4786 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210654718.063:40): user pid=5211 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210654718.072:41): user pid=5211 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210654718.130:42): user pid=5211 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210654718.130:43): user pid=5211 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210654801.717:44): user pid=5312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210654801.718:45): user pid=5312 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210654801.718:46): login pid=5312 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210654801.723:47): user pid=5312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210654801.737:48): user pid=5312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210654801.737:49): user pid=5312 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210654861.747:50): user pid=5355 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210654861.747:51): user pid=5355 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210654861.747:52): login pid=5355 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210654861.751:53): user pid=5355 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210654861.817:54): user pid=5355 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210654861.818:55): user pid=5355 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210655273.197:56): user pid=5211 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210655273.200:57): user pid=5211 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210655280.218:58): user pid=6456 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210655280.223:59): user pid=6456 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210655280.239:60): user pid=6456 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210655280.240:61): user pid=6456 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=AVC msg=audit(1210655303.866:62): avc: denied { getattr } for pid=6593 comm="tmpwatch" path="/tmp/ob12.pdf" dev=dm-0 ino=15591433 scontext=system_u:system_r:tmpreaper_t:s0 tcontext=system_u:object_r:user_home_t:s0 tclass=file >type=SYSCALL msg=audit(1210655303.866:62): arch=c000003e syscall=6 success=no exit=-13 a0=604bcb a1=7fff8485e1d0 a2=7fff8485e1d0 a3=373fb22902 items=0 ppid=6591 pid=6593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="tmpwatch" exe="/usr/sbin/tmpwatch" subj=system_u:system_r:tmpreaper_t:s0 key=(null) >type=USER_ACCT msg=audit(1210655401.837:63): user pid=6762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210655401.837:64): user pid=6762 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210655401.838:65): login pid=6762 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210655401.843:66): user pid=6762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210655401.857:67): user pid=6762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210655401.857:68): user pid=6762 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210655591.198:69): user pid=6456 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210655591.200:70): user pid=6456 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210656001.874:71): user pid=7376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210656001.875:72): user pid=7376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210656001.875:73): login pid=7376 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210656001.879:74): user pid=7376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210656001.890:75): user pid=7376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210656001.890:76): user pid=7376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210656601.897:77): user pid=8125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210656601.898:78): user pid=8125 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210656601.898:79): login pid=8125 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210656601.910:80): user pid=8125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210656601.930:81): user pid=8125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210656601.931:82): user pid=8125 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210657201.946:83): user pid=8630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210657201.947:84): user pid=8630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210657201.947:85): login pid=8630 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210657201.951:86): user pid=8630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210657201.969:87): user pid=8630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210657201.969:88): user pid=8630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210657801.983:89): user pid=9213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210657801.984:90): user pid=9213 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210657801.985:91): login pid=9213 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210657801.990:92): user pid=9213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210657802.001:93): user pid=9213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210657802.002:94): user pid=9213 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210658401.017:95): user pid=10847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210658401.018:96): user pid=10847 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210658401.018:97): login pid=10847 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210658401.023:98): user pid=10847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210658401.035:99): user pid=10847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210658401.035:100): user pid=10847 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210658461.045:101): user pid=10929 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210658461.046:102): user pid=10929 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210658461.046:103): login pid=10929 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210658461.052:104): user pid=10929 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210658461.066:105): user pid=10929 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210658461.066:106): user pid=10929 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1210658693.377:107): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=11248 comm="npviewer.bin" sig=6 >type=USER_ACCT msg=audit(1210659001.078:108): user pid=11529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210659001.079:109): user pid=11529 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210659001.079:110): login pid=11529 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210659001.085:111): user pid=11529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210659001.098:112): user pid=11529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210659001.098:113): user pid=11529 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210659601.109:114): user pid=11947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210659601.110:115): user pid=11947 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210659601.110:116): login pid=11947 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210659601.115:117): user pid=11947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210659601.130:118): user pid=11947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210659601.130:119): user pid=11947 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210660201.141:120): user pid=12394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210660201.142:121): user pid=12394 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210660201.142:122): login pid=12394 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210660201.149:123): user pid=12394 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210660201.159:124): user pid=12394 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210660201.159:125): user pid=12394 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210660801.171:126): user pid=12809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210660801.171:127): user pid=12809 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210660801.172:128): login pid=12809 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210660801.176:129): user pid=12809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210660801.193:130): user pid=12809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210660801.193:131): user pid=12809 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210661401.204:132): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210661401.205:133): user pid=13217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210661401.205:134): login pid=13217 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210661401.210:135): user pid=13217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210661401.218:136): user pid=13217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210661401.219:137): user pid=13217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210662001.231:138): user pid=13620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210662001.231:139): user pid=13620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210662001.231:140): login pid=13620 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210662001.237:141): user pid=13620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210662001.252:142): user pid=13620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210662001.252:143): user pid=13620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210662061.262:144): user pid=13663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210662061.262:145): user pid=13663 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210662061.263:146): login pid=13663 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210662061.268:147): user pid=13663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210662061.276:148): user pid=13663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210662061.276:149): user pid=13663 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210662601.288:150): user pid=14029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210662601.288:151): user pid=14029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210662601.288:152): login pid=14029 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210662601.293:153): user pid=14029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210662601.307:154): user pid=14029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210662601.307:155): user pid=14029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210663201.319:156): user pid=14439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210663201.319:157): user pid=14439 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210663201.319:158): login pid=14439 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210663201.325:159): user pid=14439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210663201.337:160): user pid=14439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210663201.337:161): user pid=14439 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210663801.349:162): user pid=14886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210663801.350:163): user pid=14886 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210663801.350:164): login pid=14886 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210663801.356:165): user pid=14886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210663801.372:166): user pid=14886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210663801.372:167): user pid=14886 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210664401.384:168): user pid=15301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210664401.384:169): user pid=15301 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210664401.385:170): login pid=15301 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210664401.390:171): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210664401.405:172): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210664401.405:173): user pid=15301 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210665001.419:174): user pid=15828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210665001.420:175): user pid=15828 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210665001.420:176): login pid=15828 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210665001.425:177): user pid=15828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210665001.437:178): user pid=15828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210665001.437:179): user pid=15828 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210665601.452:180): user pid=16442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210665601.453:181): user pid=16442 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210665601.453:182): login pid=16442 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210665601.458:183): user pid=16442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210665601.473:184): user pid=16442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210665601.473:185): user pid=16442 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210665661.483:186): user pid=16486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210665661.484:187): user pid=16486 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210665661.484:188): login pid=16486 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210665661.489:189): user pid=16486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210665661.497:190): user pid=16486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210665661.497:191): user pid=16486 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210666201.511:192): user pid=16870 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210666201.512:193): user pid=16870 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210666201.512:194): login pid=16870 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210666201.516:195): user pid=16870 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210666201.531:196): user pid=16870 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210666201.531:197): user pid=16870 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210666801.542:198): user pid=17275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210666801.543:199): user pid=17275 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210666801.543:200): login pid=17275 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210666801.548:201): user pid=17275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210666801.557:202): user pid=17275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210666801.558:203): user pid=17275 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210667401.622:204): user pid=17734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210667401.633:205): user pid=17734 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210667401.633:206): login pid=17734 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210667401.638:207): user pid=17734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210667401.671:208): user pid=17734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210667401.671:209): user pid=17734 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210668001.687:210): user pid=18165 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210668001.688:211): user pid=18165 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210668001.688:212): login pid=18165 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210668001.702:213): user pid=18165 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210668001.782:214): user pid=18165 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210668001.782:215): user pid=18165 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1210668336.197:216): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=18474 comm="npviewer.bin" sig=6 >type=USER_ACCT msg=audit(1210668601.794:217): user pid=18974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210668601.794:218): user pid=18974 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210668601.795:219): login pid=18974 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210668601.801:220): user pid=18974 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210668601.815:221): user pid=18974 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210668601.815:222): user pid=18974 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210668827.556:223): user pid=19215 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210668827.561:224): user pid=19215 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210668827.577:225): user pid=19215 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210668827.577:226): user pid=19215 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210669201.826:227): user pid=20029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210669201.827:228): user pid=20029 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210669201.827:229): login pid=20029 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210669201.833:230): user pid=20029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210669201.887:231): user pid=20029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210669201.887:232): user pid=20029 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210669261.897:233): user pid=20118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210669261.897:234): user pid=20118 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210669261.897:235): login pid=20118 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210669261.902:236): user pid=20118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210669261.998:237): user pid=20118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210669261.998:238): user pid=20118 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210669801.005:239): user pid=20620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210669801.006:240): user pid=20620 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210669801.006:241): login pid=20620 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210669801.013:242): user pid=20620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210669801.025:243): user pid=20620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210669801.025:244): user pid=20620 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210670310.311:245): user pid=19215 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210670310.313:246): user pid=19215 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210670401.035:247): user pid=21101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210670401.036:248): user pid=21101 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210670401.036:249): login pid=21101 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210670401.043:250): user pid=21101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210670401.055:251): user pid=21101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210670401.055:252): user pid=21101 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210671001.071:253): user pid=21906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210671001.073:254): user pid=21906 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210671001.073:255): login pid=21906 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210671001.081:256): user pid=21906 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210671001.092:257): user pid=21906 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210671001.093:258): user pid=21906 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210671066.095:259): user pid=22066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210671066.101:260): user pid=22066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210671066.156:261): user pid=22066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210671066.156:262): user pid=22066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210671068.591:263): user pid=22066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210671068.592:264): user pid=22066 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USYS_CONFIG msg=audit(1210671264.500:265): user pid=22478 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USYS_CONFIG msg=audit(1210671346.489:266): user pid=22622 uid=0 auid=4294967295 subj=system_u:system_r:hwclock_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210671601.623:267): user pid=23087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210671601.625:268): user pid=23087 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210671601.625:269): login pid=23087 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210671601.630:270): user pid=23087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210671601.643:271): user pid=23087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210671601.643:272): user pid=23087 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210672201.651:273): user pid=23491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210672201.651:274): user pid=23491 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210672201.651:275): login pid=23491 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210672201.656:276): user pid=23491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210672201.665:277): user pid=23491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210672201.665:278): user pid=23491 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210672801.678:279): user pid=24404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210672801.679:280): user pid=24404 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210672801.679:281): login pid=24404 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210672801.683:282): user pid=24404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210672801.692:283): user pid=24404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210672801.692:284): user pid=24404 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210672861.702:285): user pid=24447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210672861.703:286): user pid=24447 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210672861.704:287): login pid=24447 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210672861.709:288): user pid=24447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210672861.716:289): user pid=24447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210672861.716:290): user pid=24447 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210673401.728:291): user pid=24966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210673401.729:292): user pid=24966 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210673401.729:293): login pid=24966 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210673401.737:294): user pid=24966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210673401.748:295): user pid=24966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210673401.748:296): user pid=24966 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210674001.761:297): user pid=25376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210674001.762:298): user pid=25376 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210674001.762:299): login pid=25376 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210674001.767:300): user pid=25376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210674001.775:301): user pid=25376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210674001.775:302): user pid=25376 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210674601.792:303): user pid=26219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210674601.794:304): user pid=26219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210674601.794:305): login pid=26219 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210674601.800:306): user pid=26219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210674601.813:307): user pid=26219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210674601.813:308): user pid=26219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210675201.827:309): user pid=26866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210675201.828:310): user pid=26866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210675201.828:311): login pid=26866 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210675201.833:312): user pid=26866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210675201.847:313): user pid=26866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210675201.847:314): user pid=26866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210675801.855:315): user pid=27516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210675801.855:316): user pid=27516 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210675801.856:317): login pid=27516 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210675801.861:318): user pid=27516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210675801.870:319): user pid=27516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210675801.870:320): user pid=27516 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210676401.883:321): user pid=28143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210676401.884:322): user pid=28143 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210676401.884:323): login pid=28143 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210676401.890:324): user pid=28143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210676401.902:325): user pid=28143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210676401.903:326): user pid=28143 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210676461.913:327): user pid=28186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210676461.914:328): user pid=28186 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210676461.914:329): login pid=28186 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210676461.920:330): user pid=28186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210676461.927:331): user pid=28186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210676461.927:332): user pid=28186 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210677001.939:333): user pid=28569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210677001.939:334): user pid=28569 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210677001.939:335): login pid=28569 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210677001.944:336): user pid=28569 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210677001.952:337): user pid=28569 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210677001.952:338): user pid=28569 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1210677417.819:339): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=29425 comm="npviewer.bin" sig=6 >type=ANOM_ABEND msg=audit(1210677536.145:340): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=29663 comm="npviewer.bin" sig=6 >type=USER_ACCT msg=audit(1210677601.965:341): user pid=29866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210677601.967:342): user pid=29866 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210677601.968:343): login pid=29866 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210677601.973:344): user pid=29866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210677601.986:345): user pid=29866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210677601.986:346): user pid=29866 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210678202.001:347): user pid=30437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210678202.002:348): user pid=30437 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210678202.003:349): login pid=30437 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210678202.006:350): user pid=30437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210678202.018:351): user pid=30437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210678202.018:352): user pid=30437 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210678801.025:353): user pid=30942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210678801.025:354): user pid=30942 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210678801.025:355): login pid=30942 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210678801.031:356): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210678801.056:357): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210678801.056:358): user pid=30942 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210679401.081:359): user pid=31357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210679401.081:360): user pid=31357 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210679401.082:361): login pid=31357 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210679401.085:362): user pid=31357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210679401.094:363): user pid=31357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210679401.094:364): user pid=31357 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210680001.107:365): user pid=31819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210680001.107:366): user pid=31819 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210680001.107:367): login pid=31819 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210680001.112:368): user pid=31819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210680001.122:369): user pid=31819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210680001.122:370): user pid=31819 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210680061.132:371): user pid=31862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210680061.132:372): user pid=31862 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210680061.133:373): login pid=31862 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210680061.139:374): user pid=31862 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210680061.148:375): user pid=31862 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210680061.148:376): user pid=31862 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210680601.160:377): user pid=32250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210680601.160:378): user pid=32250 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210680601.160:379): login pid=32250 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210680601.165:380): user pid=32250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210680601.174:381): user pid=32250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210680601.174:382): user pid=32250 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210681201.186:383): user pid=32660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210681201.187:384): user pid=32660 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210681201.187:385): login pid=32660 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210681201.192:386): user pid=32660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210681201.207:387): user pid=32660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210681201.207:388): user pid=32660 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210681801.228:389): user pid=693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210681801.229:390): user pid=693 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210681801.229:391): login pid=693 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210681801.241:392): user pid=693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210681801.256:393): user pid=693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210681801.257:394): user pid=693 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210682401.276:395): user pid=1217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210682401.277:396): user pid=1217 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210682401.278:397): login pid=1217 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210682401.282:398): user pid=1217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210682401.294:399): user pid=1217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210682401.294:400): user pid=1217 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210683001.307:401): user pid=1630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210683001.308:402): user pid=1630 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210683001.309:403): login pid=1630 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210683001.316:404): user pid=1630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210683001.327:405): user pid=1630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210683001.327:406): user pid=1630 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210683601.340:407): user pid=2353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210683601.340:408): user pid=2353 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210683601.340:409): login pid=2353 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210683601.345:410): user pid=2353 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210683601.367:411): user pid=2353 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210683601.367:412): user pid=2353 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210683661.372:413): user pid=2400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210683661.373:414): user pid=2400 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210683661.373:415): login pid=2400 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210683661.378:416): user pid=2400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210683661.391:417): user pid=2400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210683661.391:418): user pid=2400 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210684201.397:419): user pid=2831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210684201.397:420): user pid=2831 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210684201.397:421): login pid=2831 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210684201.403:422): user pid=2831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210684201.416:423): user pid=2831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210684201.416:424): user pid=2831 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210684801.425:425): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210684801.426:426): user pid=3289 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210684801.426:427): login pid=3289 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210684801.435:428): user pid=3289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210684801.445:429): user pid=3289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210684801.445:430): user pid=3289 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=ANOM_ABEND msg=audit(1210685148.026:431): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=4668 comm="npviewer.bin" sig=11 >type=ANOM_ABEND msg=audit(1210685355.211:432): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=5021 comm="npviewer.bin" sig=6 >type=USER_ACCT msg=audit(1210685401.460:433): user pid=5122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210685401.460:434): user pid=5122 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210685401.461:435): login pid=5122 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210685401.465:436): user pid=5122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210685401.475:437): user pid=5122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210685401.475:438): user pid=5122 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210686001.488:439): user pid=5760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210686001.489:440): user pid=5760 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210686001.489:441): login pid=5760 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210686001.495:442): user pid=5760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210686001.508:443): user pid=5760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210686001.509:444): user pid=5760 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210686601.522:445): user pid=6406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210686601.523:446): user pid=6406 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210686601.523:447): login pid=6406 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210686601.528:448): user pid=6406 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210686601.545:449): user pid=6406 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210686601.546:450): user pid=6406 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210686660.645:451): user pid=2624 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210686660.646:452): user pid=2624 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210686662.972:453): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2543 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210686673.110:8685): auditd normal halt, sending auid=4294967295 pid=6734 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210722913.076:1267): auditd start, ver=1.7.2 format=raw kernel=2.6.24.5-85.bb.fc8 auid=4294967295 pid=2075 res=success >type=CONFIG_CHANGE msg=audit(1210722913.179:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210722913.179:6): audit_enabled=1 old=0 by auid=4294967295 res=1 >type=CONFIG_CHANGE msg=audit(1210722913.222:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1210722913.222:8): audit_backlog_limit=320 old=64 by auid=4294967295 res=1 >type=USER_START msg=audit(1210722927.350:9): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210722927.350:10): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210722929.041:11): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210722929.042:12): user pid=2421 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210722929.080:13): user pid=2448 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210722929.229:14): user pid=2448 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210722987.595:15): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=failed)' >type=USER_LOGIN msg=audit(1210722987.596:16): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='acct=unknown: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=failed)' >type=USER_AUTH msg=audit(1210722991.903:17): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210722991.907:18): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210722991.923:19): user pid=2651 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210722991.928:20): login pid=2651 uid=0 old auid=4294967295 new auid=500 >type=USER_ROLE_CHANGE msg=audit(1210722991.953:21): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023 selected-context=system_u:system_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210722992.080:22): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210722992.080:23): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=plum.home, addr=127.0.0.1, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210723201.780:24): user pid=3532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210723201.781:25): user pid=3532 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210723201.781:26): login pid=3532 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210723201.787:27): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210723201.832:28): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210723201.832:29): user pid=3532 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210723261.843:30): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210723261.843:31): user pid=3575 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210723261.844:32): login pid=3575 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210723261.849:33): user pid=3575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210723261.921:34): user pid=3575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210723261.921:35): user pid=3575 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210723611.078:36): user pid=4082 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210723611.087:37): user pid=4082 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210723611.192:38): user pid=4082 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210723611.192:39): user pid=4082 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210723801.930:40): user pid=4307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210723801.931:41): user pid=4307 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210723801.931:42): login pid=4307 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210723801.940:43): user pid=4307 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210723802.175:44): user pid=4307 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210723802.175:45): user pid=4307 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210724045.858:46): user pid=4622 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210724045.862:47): user pid=4622 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210724045.890:48): user pid=4622 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210724045.891:49): user pid=4622 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210724401.452:50): user pid=5187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210724401.491:51): user pid=5187 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210724401.491:52): login pid=5187 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210724401.518:53): user pid=5187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210724401.729:54): user pid=5187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210724401.729:55): user pid=5187 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210724475.159:56): user pid=4082 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210724475.159:57): user pid=4082 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210724478.915:58): user pid=5260 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210724478.920:59): user pid=5260 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210724479.027:60): user pid=5260 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210724479.027:61): user pid=5260 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210725001.738:62): user pid=6335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210725001.739:63): user pid=6335 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210725001.739:64): login pid=6335 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210725001.745:65): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210725003.801:66): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210725003.801:67): user pid=6335 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_ACCT msg=audit(1210725602.009:68): user pid=7418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210725602.010:69): user pid=7418 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210725602.011:70): login pid=7418 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210725602.065:71): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210725602.365:72): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210725602.365:73): user pid=7418 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_AUTH msg=audit(1210725708.403:74): user pid=7657 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210725708.417:75): user pid=7657 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210725708.526:76): user pid=7657 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1210725708.543:77): user pid=7657 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_DISP msg=audit(1210725724.331:78): user pid=7657 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1210725724.331:79): user pid=7657 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210726201.383:80): user pid=8040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210726201.383:81): user pid=8040 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210726201.383:82): login pid=8040 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210726201.388:83): user pid=8040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210726201.404:84): user pid=8040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210726201.404:85): user pid=8040 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210726330.647:86): user pid=4622 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210726330.649:87): user pid=4622 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210726334.206:88): user pid=5260 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210726334.206:89): user pid=5260 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210726358.465:90): user pid=8183 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210726358.472:91): user pid=8183 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210726358.487:92): user pid=8183 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1210726358.487:93): user pid=8183 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=ANOM_ABEND msg=audit(1210726439.512:94): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=8388 comm="npviewer.bin" sig=6 >type=ANOM_ABEND msg=audit(1210726444.287:95): auid=500 uid=500 gid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 pid=8429 comm="npviewer.bin" sig=6 >type=CRED_DISP msg=audit(1210726794.526:96): user pid=8183 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1210726794.527:97): user pid=8183 uid=500 auid=500 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210726801.421:98): user pid=8932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_ACQ msg=audit(1210726801.422:99): user pid=8932 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=LOGIN msg=audit(1210726801.422:100): login pid=8932 uid=0 old auid=4294967295 new auid=0 >type=USER_START msg=audit(1210726801.427:101): user pid=8932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=CRED_DISP msg=audit(1210726801.438:102): user pid=8932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210726801.438:103): user pid=8932 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)' >type=USER_END msg=audit(1210726806.058:104): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210726806.058:105): user pid=2651 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' >type=ANOM_ABEND msg=audit(1210726808.703:106): auid=4294967295 uid=0 gid=0 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 pid=2578 comm="gdm-binary" sig=11 >type=DAEMON_END msg=audit(1210726817.857:1268): auditd normal halt, sending auid=4294967295 pid=9187 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210731919.089:6157): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.x86_64 auid=4294967295 pid=2164 res=success >type=CONFIG_CHANGE msg=audit(1210731919.219:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_START msg=audit(1210731929.606:5): user pid=2373 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210731929.606:6): user pid=2373 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210731930.429:7): user pid=2373 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210731930.430:8): user pid=2373 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210731943.341:9): user pid=2568 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210731943.346:10): user pid=2568 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210731943.348:11): login pid=2568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210731943.416:12): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210731943.499:13): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210731943.512:14): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210731943.513:15): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210731964.912:16): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210731964.914:17): user pid=2568 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210731967.943:18): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1210731967.964:19): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='acct=bbaetaz: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1210731970.496:20): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210731970.500:21): user pid=2766 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210731970.500:22): login pid=2766 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1210731970.527:23): user pid=2766 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210731970.540:24): user pid=2766 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210731970.540:25): user pid=2766 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210731970.640:26): user pid=2766 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=500: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210731976.805:27): user pid=2766 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210731976.818:28): user pid=2766 uid=0 auid=500 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210731981.102:29): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_LOGIN msg=audit(1210731981.103:30): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=failed)' >type=USER_AUTH msg=audit(1210731983.140:31): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210731983.145:32): user pid=2890 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210731983.146:33): login pid=2890 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1210731983.162:34): user pid=2890 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210731983.168:35): user pid=2890 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210731983.168:36): user pid=2890 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210731983.169:37): user pid=2890 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210732060.036:38): user pid=2565 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_ACCT msg=audit(1210732060.042:39): user pid=2565 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=LOGIN msg=audit(1210732060.043:40): login pid=2565 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_ROLE_CHANGE msg=audit(1210732060.061:41): user pid=2565 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1210732060.072:42): user pid=2565 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=CRED_ACQ msg=audit(1210732060.072:43): user pid=2565 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_LOGIN msg=audit(1210732060.073:44): user pid=2565 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_START msg=audit(1210732173.279:45): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210732173.279:46): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210732173.308:47): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210732173.308:48): user pid=3713 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210732184.630:49): user pid=2890 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210732184.633:50): user pid=2890 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210732200.415:51): user pid=4141 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210732200.421:52): user pid=4141 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210732200.428:53): user pid=4141 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210732200.459:54): login pid=4141 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5 >type=USER_ROLE_CHANGE msg=audit(1210732200.487:55): user pid=4141 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210732201.494:56): user pid=4141 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210732201.495:57): user pid=4141 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=USER_AUTH msg=audit(1210732256.614:58): user pid=4994 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210732256.619:59): user pid=4994 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210732256.680:60): user pid=4994 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210732256.681:61): user pid=4994 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210732331.092:62): user pid=5324 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210732331.098:63): user pid=5324 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210732331.109:64): user pid=5324 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210732331.110:65): user pid=5324 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210732477.436:66): user pid=5324 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210732477.438:67): user pid=5324 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210732485.242:68): user pid=5582 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210732485.243:69): user pid=5582 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210732485.285:70): user pid=5582 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210732511.783:71): user pid=5582 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210732514.000:72): user pid=5805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210732514.003:73): user pid=5805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210732514.017:74): user pid=5805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210732514.017:75): user pid=5805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210732553.452:76): user pid=5805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210732553.453:77): user pid=5805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210732576.451:78): user pid=6049 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210732576.456:79): user pid=6049 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210732576.467:80): user pid=6049 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210732576.467:81): user pid=6049 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210732868.486:82): user pid=6049 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210732868.489:83): user pid=6049 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210732891.823:84): user pid=6567 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210732891.830:85): user pid=6567 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210732891.844:86): user pid=6567 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210732891.845:87): user pid=6567 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210732962.657:88): user pid=6567 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210732962.659:89): user pid=6567 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210733008.259:90): user pid=6789 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210733008.259:91): user pid=6789 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210733008.269:92): user pid=6789 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210733040.618:93): user pid=6789 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210733240.455:94): user pid=7135 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210733240.458:95): user pid=7135 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210733240.482:96): user pid=7135 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210733240.482:97): user pid=7135 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210733293.968:98): user pid=7135 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210733293.968:99): user pid=7135 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=ANOM_ABEND msg=audit(1210733733.184:100): auid=500 uid=500 gid=500 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=7886 comm="npviewer.bin" sig=11 >type=USER_AUTH msg=audit(1210733859.435:101): user pid=8158 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210733859.438:102): user pid=8158 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210733859.481:103): user pid=8158 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1210733859.482:104): user pid=8158 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210734075.805:105): user pid=8623 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210734075.907:106): user pid=8623 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210734085.757:107): user pid=8658 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210734085.762:108): user pid=8658 uid=0 auid=500 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=CRED_DISP msg=audit(1210734094.576:109): user pid=4994 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210734094.579:110): user pid=4994 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210734151.899:111): user pid=8770 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210734151.905:112): user pid=8770 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=ANOM_ABEND msg=audit(1210734204.820:113): auid=500 uid=500 gid=500 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=8890 comm="npviewer.bin" sig=11 >type=USER_AUTH msg=audit(1210734490.913:114): user pid=10385 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210734490.913:115): user pid=10385 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210734938.513:116): user pid=22328 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1210734938.525:117): user pid=22328 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1210734938.741:118): user pid=22328 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_ACQ msg=audit(1210734938.756:119): user pid=22328 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_AUTH msg=audit(1210735155.248:120): user pid=32547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_ACCT msg=audit(1210735155.251:121): user pid=32547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_START msg=audit(1210735155.267:122): user pid=32547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_ACQ msg=audit(1210735155.267:123): user pid=32547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_DISP msg=audit(1210735339.050:124): user pid=22328 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1210735339.052:125): user pid=22328 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_CHAUTHTOK msg=audit(1210735421.429:126): user pid=7163 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1210735460.027:127): user pid=7867 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting user not found acct="mockbuild" exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1210735460.062:128): user pid=7868 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=deleting group acct="mockbuild" exe="?" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_CHAUTHTOK msg=audit(1210735460.093:129): user pid=7869 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct="mockbuild" exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1210735460.305:130): user pid=7873 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding user acct="mockbuild" exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1210735460.308:131): user pid=7873 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding home directory acct="mockbuild" exe="?" (hostname=?, addr=?, terminal=? res=success)' >type=USER_CHAUTHTOK msg=audit(1210735771.930:132): user pid=16295 uid=0 auid=500 subj=unconfined_u:system_r:unconfined_notrans_t:s0-s0:c0.c1023 msg='op=adding group acct="ccache" exe="/usr/sbin/groupadd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210735861.105:133): user pid=18286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_ACCT msg=audit(1210735861.129:134): user pid=18286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_START msg=audit(1210735861.289:135): user pid=18286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=CRED_ACQ msg=audit(1210735861.303:136): user pid=18286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_CHAUTHTOK msg=audit(1210735902.790:137): user pid=19360 uid=0 auid=500 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="bbaetz" exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_CHAUTHTOK msg=audit(1210735902.791:138): user pid=19360 uid=0 auid=500 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=500 exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=CRED_DISP msg=audit(1210735903.604:139): user pid=18286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_END msg=audit(1210735903.605:140): user pid=18286 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_AUTH msg=audit(1210735905.292:141): user pid=19457 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_ACCT msg=audit(1210735905.297:142): user pid=19457 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_START msg=audit(1210735905.419:143): user pid=19457 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=CRED_ACQ msg=audit(1210735905.419:144): user pid=19457 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_CHAUTHTOK msg=audit(1210735916.921:145): user pid=19730 uid=0 auid=500 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="root" exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_CHAUTHTOK msg=audit(1210735916.922:146): user pid=19730 uid=0 auid=500 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=0 exe="/usr/bin/passwd" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=CRED_DISP msg=audit(1210735927.682:147): user pid=19457 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_END msg=audit(1210735927.682:148): user pid=19457 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_AUTH msg=audit(1210735946.356:149): user pid=20406 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_ACCT msg=audit(1210735946.377:150): user pid=20406 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_START msg=audit(1210735946.452:151): user pid=20406 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=CRED_ACQ msg=audit(1210735946.453:152): user pid=20406 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=CRED_DISP msg=audit(1210735963.173:153): user pid=8158 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_END msg=audit(1210735963.175:154): user pid=8158 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_DISP msg=audit(1210736091.213:155): user pid=20406 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=USER_END msg=audit(1210736091.215:156): user pid=20406 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/8 res=success)' >type=AVC msg=audit(1210736119.086:157): avc: denied { getattr } for pid=25051 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210736119.086:157): arch=c000003e syscall=6 success=no exit=-13 a0=7fffde3efc3a a1=7fffde3eb9a0 a2=7fffde3eb9a0 a3=7fffde3eb6f0 items=0 ppid=21035 pid=25051 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=5 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210736134.743:158): user pid=25461 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_ACCT msg=audit(1210736134.796:159): user pid=25461 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_START msg=audit(1210736134.898:160): user pid=25461 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=CRED_ACQ msg=audit(1210736134.898:161): user pid=25461 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=AVC msg=audit(1210736172.418:162): avc: denied { getattr } for pid=26293 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210736172.418:162): arch=c000003e syscall=6 success=no exit=-13 a0=7fffebe4ec1d a1=7fffebe4c3e0 a2=7fffebe4c3e0 a3=7fffebe4c130 items=0 ppid=21039 pid=26293 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=5 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210736177.028:163): user pid=26392 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_ACCT msg=audit(1210736177.028:164): user pid=26392 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_START msg=audit(1210736177.146:165): user pid=26392 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_END msg=audit(1210736244.339:166): user pid=26392 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=AVC msg=audit(1210736247.095:167): avc: denied { getattr } for pid=28285 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210736247.095:167): arch=c000003e syscall=6 success=no exit=-13 a0=7fff02a5dc1d a1=7fff02a59ff0 a2=7fff02a59ff0 a3=7fff02a59d40 items=0 ppid=21040 pid=28285 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=5 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=CRED_DISP msg=audit(1210736360.119:168): user pid=25461 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_END msg=audit(1210736360.120:169): user pid=25461 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/9 res=success)' >type=USER_AUTH msg=audit(1210736374.730:170): user pid=31540 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210736374.730:171): user pid=31540 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210736508.886:172): user pid=32547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_END msg=audit(1210736508.933:173): user pid=32547 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_AUTH msg=audit(1210736561.358:174): user pid=6994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/7 res=success)' >type=USER_ACCT msg=audit(1210736561.384:175): user pid=6994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/7 res=success)' >type=CRED_ACQ msg=audit(1210736561.428:176): user pid=6994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/7 res=success)' >type=USER_START msg=audit(1210736561.429:177): user pid=6994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/7 res=success)' >type=USER_END msg=audit(1210736561.429:178): user pid=6994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/7 res=success)' >type=USER_CMD msg=audit(1210736561.429:179): user pid=6994 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/bbaetz" cmd=2F62696E2F72706D202D557668202F746D702F64656C7567652D302E352E382E392D312E6663392E7838365F36342E72706D (terminal=pts/7 res=success)' >type=USER_AUTH msg=audit(1210736770.701:180): user pid=13079 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_ACCT msg=audit(1210736770.704:181): user pid=13079 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_START msg=audit(1210736770.888:182): user pid=13079 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_ACQ msg=audit(1210736770.889:183): user pid=13079 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=CRED_DISP msg=audit(1210736775.383:184): user pid=13079 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_END msg=audit(1210736775.384:185): user pid=13079 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/7 res=success)' >type=USER_AUTH msg=audit(1210736839.979:186): user pid=14650 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210736839.995:187): user pid=14650 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210736840.046:188): user pid=14650 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210736840.046:189): user pid=14650 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210736864.126:190): user pid=14650 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210736864.128:191): user pid=14650 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210736912.660:192): user pid=15247 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="bbaetz" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210736931.214:193): user pid=15898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210736931.235:194): user pid=15898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210736931.289:195): user pid=15898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210736931.290:196): user pid=15898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210737113.561:197): user pid=15898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210737113.563:198): user pid=15898 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210737734.182:199): user pid=24264 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="bbaetz" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210737747.738:200): user pid=24278 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=USER_ACCT msg=audit(1210737747.741:201): user pid=24278 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=CRED_ACQ msg=audit(1210737747.762:202): user pid=24278 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_START msg=audit(1210737747.811:203): user pid=24278 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_END msg=audit(1210737747.812:204): user pid=24278 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_CMD msg=audit(1210737747.813:205): user pid=24278 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/bbaetz/rpmbuild/SPECS" cmd=2F62696E2F72706D202D557668202F686F6D652F62626165747A2F72706D6275696C642F52504D532F7838365F36342F6B65726E656C2D322E362E32352D31342E62622E6663392E7838365F36342E72706D202F686F6D652F62626165747A2F72706D6275696C642F52504D532F7838365F36342F6B65726E656C2D686561646572732D322E362E32352D31342E62622E6663392E7838365F36342E72706D202F686F6D652F62626165747A2F72706D6275696C642F52504D532F7838365F36342F6B65726E656C2D646576656C2D322E362E32352D31342E62622E6663392E7838365F36342E72706D (terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1210737755.893:206): user pid=24288 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1210737755.893:207): user pid=24288 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1210737756.421:208): user pid=24288 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1210737760.829:209): user pid=24288 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210737805.667:210): user pid=24335 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_START msg=audit(1210737805.668:211): user pid=24335 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_END msg=audit(1210737805.668:212): user pid=24335 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_CMD msg=audit(1210737805.669:213): user pid=24335 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/bbaetz/rpmbuild/SPECS" cmd=2F62696E2F72706D202D697668202D2D6F6C647061636B616765202F686F6D652F62626165747A2F72706D6275696C642F52504D532F7838365F36342F6B65726E656C2D322E362E32352D31342E62622E6663392E7838365F36342E72706D202F686F6D652F62626165747A2F72706D6275696C642F52504D532F7838365F36342F6B65726E656C2D686561646572732D322E362E32352D31342E62622E6663392E7838365F36342E72706D202F686F6D652F62626165747A2F72706D6275696C642F52504D532F7838365F36342F6B65726E656C2D646576656C2D322E362E32352D31342E62622E6663392E7838365F36342E72706D (terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1210737914.142:214): user pid=28082 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=failed)' >type=USER_AUTH msg=audit(1210737919.592:215): user pid=28095 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210737919.595:216): user pid=28095 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210737920.015:217): user pid=2565 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=USER_END msg=audit(1210737920.019:218): user pid=2565 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty2 res=success)' >type=DAEMON_END msg=audit(1210737932.999:6158): auditd normal halt, sending auid=0 pid=28396 subj=system_u:system_r:initrc_t:s0 res=success >type=DAEMON_START msg=audit(1210766061.607:611): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.bb.fc9.x86_64 auid=4294967295 pid=2159 res=success >type=CONFIG_CHANGE msg=audit(1210766061.740:7): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 >type=USER_START msg=audit(1210766071.295:8): user pid=2363 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_ACQ msg=audit(1210766071.295:9): user pid=2363 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210766072.252:10): user pid=2363 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=USER_END msg=audit(1210766072.254:11): user pid=2363 uid=0 auid=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="boinc" exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210766072.489:12): user pid=2396 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Color_LaserJet_2605 uri=socket://192.168.0.31:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=LABEL_LEVEL_CHANGE msg=audit(1210766072.674:13): user pid=2396 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Commonroom uri=smb:///bluewhale/kprlg18 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=plum.home, addr=127.0.0.1, terminal=? res=success)' >type=USER_AUTH msg=audit(1210766115.070:14): user pid=2556 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210766115.073:15): user pid=2556 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210766115.074:16): login pid=2556 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1210766115.111:17): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210766115.132:18): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210766115.141:19): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210766115.142:20): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_DISP msg=audit(1210766262.924:21): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_END msg=audit(1210766262.925:22): user pid=2556 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210766274.302:23): user pid=4075 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210766274.305:24): user pid=4075 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210766274.309:25): user pid=4075 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210766274.348:26): login pid=4075 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=2 >type=USER_ROLE_CHANGE msg=audit(1210766274.391:27): user pid=4075 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210766274.743:28): user pid=4075 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210766274.744:29): user pid=4075 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=USER_AUTH msg=audit(1210766358.171:30): user pid=4805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210766358.171:31): user pid=4805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210766358.210:32): user pid=4805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210766422.144:33): user pid=4805 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210766424.478:34): user pid=5065 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210766424.494:35): user pid=5065 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210766424.508:36): user pid=5065 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210766424.508:37): user pid=5065 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=ANOM_ABEND msg=audit(1210766649.537:38): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=5564 comm="npviewer.bin" sig=11 >type=ANOM_ABEND msg=audit(1210766651.570:39): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=5611 comm="npviewer.bin" sig=11 >type=ANOM_ABEND msg=audit(1210766655.147:40): auid=500 uid=500 gid=500 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=5627 comm="npviewer.bin" sig=11 >type=CRED_DISP msg=audit(1210766921.868:41): user pid=5065 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210766921.870:42): user pid=5065 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210767139.456:43): user pid=6809 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210767139.459:44): user pid=6809 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210767139.470:45): user pid=6809 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210767139.471:46): user pid=6809 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210767157.712:47): user pid=6882 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210767157.712:48): user pid=6882 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210767157.720:49): user pid=6882 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210767179.857:50): user pid=6882 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210767187.211:51): user pid=6809 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210767187.212:52): user pid=6809 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210767205.222:53): user pid=7021 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210767205.224:54): user pid=7021 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210767205.237:55): user pid=7021 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210767205.237:56): user pid=7021 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210767226.793:57): user pid=7021 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210767226.794:58): user pid=7021 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210767232.580:59): user pid=4075 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1210767232.594:60): user pid=4075 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_AUTH msg=audit(1210767267.981:61): user pid=4326 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_ACCT msg=audit(1210767267.984:62): user pid=4326 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=LOGIN msg=audit(1210767267.985:63): login pid=4326 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1210767267.998:64): user pid=4326 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_START msg=audit(1210767268.008:65): user pid=4326 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=CRED_ACQ msg=audit(1210767268.008:66): user pid=4326 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_LOGIN msg=audit(1210767268.008:67): user pid=4326 uid=0 auid=0 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)' >type=USER_AUTH msg=audit(1210767445.683:68): user pid=9712 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210767445.686:69): user pid=9712 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210767445.690:70): user pid=9712 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210767445.721:71): login pid=9712 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=4 >type=USER_ROLE_CHANGE msg=audit(1210767445.744:72): user pid=9712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210767446.035:73): user pid=9712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210767446.036:74): user pid=9712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=USER_AUTH msg=audit(1210767514.329:75): user pid=10230 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210767514.334:76): user pid=10230 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210767514.352:77): user pid=10230 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210767514.352:78): user pid=10230 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210767745.074:79): user pid=11146 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210767745.078:80): user pid=11146 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210767745.090:81): user pid=11146 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210767745.090:82): user pid=11146 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210767807.925:83): user pid=11146 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210767807.929:84): user pid=11146 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=ANOM_ABEND msg=audit(1210767839.365:85): auid=500 uid=500 gid=500 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=11405 comm="npviewer.bin" sig=11 >type=ANOM_ABEND msg=audit(1210767845.274:86): auid=500 uid=500 gid=500 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=11453 comm="npviewer.bin" sig=11 >type=USER_AUTH msg=audit(1210767989.622:87): user pid=11784 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210767989.622:88): user pid=11784 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210768074.558:89): user pid=11896 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210768074.562:90): user pid=11896 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)' >type=USER_AUTH msg=audit(1210768212.017:91): user pid=12192 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=USER_ACCT msg=audit(1210768212.020:92): user pid=12192 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/bin/sudo" (hostname=?, addr=?, terminal=/dev/pts/3 res=success)' >type=CRED_ACQ msg=audit(1210768212.022:93): user pid=12192 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_START msg=audit(1210768212.023:94): user pid=12192 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_END msg=audit(1210768212.023:95): user pid=12192 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" (hostname=plum.home, addr=127.0.0.1, terminal=/dev/pts/3 res=success)' >type=USER_CMD msg=audit(1210768212.024:96): user pid=12192 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D5576682073656C696E75782D706F6C6963792D332E332E312D35312E6663392E6E6F617263682E72706D2073656C696E75782D706F6C6963792D646576656C2D332E332E312D35312E6663392E6E6F617263682E72706D2073656C696E75782D706F6C6963792D74617267657465642D332E332E312D35312E6663392E6E6F617263682E72706D (terminal=pts/3 res=success)' >type=MAC_POLICY_LOAD msg=audit(1210768253.183:97): policy loaded auid=500 ses=4 >type=SYSCALL msg=audit(1210768253.183:97): arch=c000003e syscall=1 success=yes exit=3742127 a0=4 a1=7f44713e1010 a2=3919af a3=7fff79b20cd0 items=0 ppid=12276 pid=12306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts3 ses=4 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210768253.598:98): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=USER_AUTH msg=audit(1210768276.918:99): user pid=12486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210768276.921:100): user pid=12486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210768276.937:101): user pid=12486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210768276.937:102): user pid=12486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210768287.800:103): user pid=12486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210768287.804:104): user pid=12486 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=AVC msg=audit(1210768292.933:105): avc: denied { getattr } for pid=12688 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210768292.933:105): arch=c000003e syscall=6 success=no exit=-13 a0=7fff97e65c3a a1=7fff97e63410 a2=7fff97e63410 a3=7fff97e63160 items=0 ppid=12673 pid=12688 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210768293.853:106): avc: denied { getattr } for pid=12695 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210768293.853:106): arch=c000003e syscall=6 success=no exit=-13 a0=7fff096adc1d a1=7fff096aac40 a2=7fff096aac40 a3=7fff096aa990 items=0 ppid=12675 pid=12695 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210768368.560:107): user pid=12801 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1210768368.563:108): user pid=12801 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1210768368.579:109): user pid=12801 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1210768368.580:110): user pid=12801 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=AVC msg=audit(1210768399.417:111): avc: denied { getattr } for pid=12911 comm="suexec" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210768399.417:111): arch=c000003e syscall=6 success=no exit=-13 a0=7fff0ee34c37 a1=7fff0ee313e0 a2=7fff0ee313e0 a3=7fff0ee31130 items=0 ppid=12676 pid=12911 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210768586.583:112): user pid=13041 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210768586.585:113): user pid=13041 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210768586.599:114): user pid=13041 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210768586.601:115): user pid=13041 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210768801.597:116): user pid=13387 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_ACCT msg=audit(1210768801.602:117): user pid=13387 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_START msg=audit(1210768801.618:118): user pid=13387 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_ACQ msg=audit(1210768801.618:119): user pid=13387 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=AVC msg=audit(1210768841.175:120): avc: denied { getattr } for pid=13493 comm="suexec" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210768841.175:120): arch=c000003e syscall=6 success=no exit=-13 a0=7fff6687cc37 a1=7fff668792e0 a2=7fff668792e0 a3=7fff66879030 items=0 ppid=13481 pid=13493 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210768849.486:121): user pid=13500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=USER_ACCT msg=audit(1210768849.486:122): user pid=13500 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210768856.068:123): user pid=9712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_END msg=audit(1210768856.084:124): user pid=9712 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_DISP msg=audit(1210768856.141:125): user pid=10230 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210768856.142:126): user pid=13041 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210768856.143:127): user pid=13041 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210768856.146:128): user pid=10230 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_DISP msg=audit(1210768856.146:129): user pid=13387 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=USER_END msg=audit(1210768856.146:130): user pid=13387 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/6 res=success)' >type=CRED_DISP msg=audit(1210768856.159:131): user pid=12801 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1210768856.160:132): user pid=12801 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_AUTH msg=audit(1210768866.424:133): user pid=13724 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_ACCT msg=audit(1210768866.429:134): user pid=13724 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=CRED_ACQ msg=audit(1210768866.433:135): user pid=13724 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=LOGIN msg=audit(1210768866.484:136): login pid=13724 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=5 >type=USER_ROLE_CHANGE msg=audit(1210768866.510:137): user pid=13724 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)' >type=USER_START msg=audit(1210768866.546:138): user pid=13724 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="bbaetz" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)' >type=USER_LOGIN msg=audit(1210768866.548:139): user pid=13724 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)' >type=AVC msg=audit(1210768884.473:140): avc: denied { getattr } for pid=14189 comm="suexec" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210768884.473:140): arch=c000003e syscall=6 success=no exit=-13 a0=7fff3b9b9c54 a1=7fff3b9b5860 a2=7fff3b9b5860 a3=7fff3b9b55b0 items=0 ppid=13482 pid=14189 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210769060.217:141): user pid=14371 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210769060.220:142): user pid=14371 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210769060.234:143): user pid=14371 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210769060.234:144): user pid=14371 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210769541.895:145): user pid=15115 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210769541.899:146): user pid=15115 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210769541.916:147): user pid=15115 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210769541.917:148): user pid=15115 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210770579.948:149): user pid=21962 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_chkpwd_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="bbaetz" exe="/sbin/unix_chkpwd" (hostname=?, addr=?, terminal=? res=success)' >type=CRED_DISP msg=audit(1210770595.907:150): user pid=15115 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210770595.911:151): user pid=15115 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210770621.904:152): user pid=14371 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210770621.905:153): user pid=14371 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210770712.360:154): user pid=22248 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_ACCT msg=audit(1210770712.380:155): user pid=22248 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_START msg=audit(1210770712.423:156): user pid=22248 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_ACQ msg=audit(1210770712.423:157): user pid=22248 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=CRED_DISP msg=audit(1210770741.325:158): user pid=22248 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_END msg=audit(1210770741.327:159): user pid=22248 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/2 res=success)' >type=USER_AUTH msg=audit(1210770804.399:160): user pid=22515 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210770804.403:161): user pid=22515 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210770804.423:162): user pid=22515 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210770804.423:163): user pid=22515 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AVC msg=audit(1210770840.854:164): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=3) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210770840.439:165): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210770840.439:165): arch=c000003e syscall=1 success=yes exit=3742151 a0=4 a1=7ffafca0a010 a2=3919c7 a3=7fff05149870 items=0 ppid=22608 pid=22617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210770852.269:166): avc: denied { execute } for pid=22631 comm="suexec" name="index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210770852.269:166): arch=c000003e syscall=59 success=no exit=-13 a0=7fffbd89ec3a a1=7fffbd89e2c0 a2=7f13b66e2010 a3=7fffbd89bba0 items=0 ppid=13485 pid=22631 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210770853.393:167): avc: denied { execute } for pid=22632 comm="suexec" name="index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210770853.393:167): arch=c000003e syscall=59 success=no exit=-13 a0=7fff45cebc1d a1=7fff45ceb6f0 a2=7f333eba7010 a3=7fff45ce8fd0 items=0 ppid=13487 pid=22632 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210770878.805:168): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=4) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210770878.303:169): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210770878.303:169): arch=c000003e syscall=1 success=yes exit=3742151 a0=4 a1=7ff110e8a010 a2=3919c7 a3=7fff195c9100 items=0 ppid=22646 pid=22655 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210770894.568:170): avc: denied { read } for pid=22669 comm="suexec" name="index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210770894.568:170): arch=c000003e syscall=59 success=no exit=-13 a0=7fff94f7dc1d a1=7fff94f7c980 a2=7f708e0eb010 a3=7fff94f7a260 items=0 ppid=13488 pid=22669 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210770919.372:171): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=5) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210770918.940:172): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210770918.940:172): arch=c000003e syscall=1 success=yes exit=3742151 a0=4 a1=7ff11ab51010 a2=3919c7 a3=7fff2328fa00 items=0 ppid=22687 pid=22696 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210770921.143:173): avc: denied { execute_no_trans } for pid=22698 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210770921.143:173): arch=c000003e syscall=59 success=no exit=-13 a0=7fff950cdc1d a1=7fff950ccad0 a2=7f898e939010 a3=7fff950ca3b0 items=0 ppid=13486 pid=22698 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771031.370:174): avc: denied { execute_no_trans } for pid=22777 comm="suexec" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771031.370:174): arch=c000003e syscall=59 success=no exit=-13 a0=7fff6ad3cc1d a1=7fff6ad3b740 a2=7f3d631d4010 a3=7fff6ad39020 items=0 ppid=13481 pid=22777 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210771050.164:175): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=6) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771049.602:176): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771049.602:176): arch=c000003e syscall=1 success=yes exit=3742151 a0=4 a1=7fb24464e010 a2=3919c7 a3=7fff4cd8c460 items=0 ppid=22788 pid=22797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210771052.204:177): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/index.cgi" dev=dm-0 ino=15619979 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771052.204:177): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fffb12d7730 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771052.454:178): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla.pm" dev=dm-0 ino=15615136 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771052.454:178): arch=c000003e syscall=16 success=no exit=-13 a0=4 a1=5401 a2=7fffb12d6fa0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771052.692:179): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Config.pm" dev=dm-0 ino=916793 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771052.692:179): arch=c000003e syscall=16 success=no exit=-13 a0=5 a1=5401 a2=7fffb12d6920 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771052.733:180): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Constants.pm" dev=dm-0 ino=15615817 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771052.733:180): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771053.971:181): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth.pm" dev=dm-0 ino=15615809 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771053.971:181): arch=c000003e syscall=16 success=no exit=-13 a0=5 a1=5401 a2=7fffb12d6920 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.093:182): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Error.pm" dev=dm-0 ino=15615819 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.093:182): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.378:183): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/WebService/Constants.pm" dev=dm-0 ino=15615164 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.378:183): arch=c000003e syscall=16 success=no exit=-13 a0=7 a1=5401 a2=7fffb12d5c20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.443:184): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Util.pm" dev=dm-0 ino=15615835 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.443:184): arch=c000003e syscall=16 success=no exit=-13 a0=7 a1=5401 a2=7fffb12d5c20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.741:185): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Login/Stack.pm" dev=dm-0 ino=15615864 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.741:185): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.795:186): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Login.pm" dev=dm-0 ino=15615853 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.795:186): arch=c000003e syscall=16 success=no exit=-13 a0=7 a1=5401 a2=7fffb12d5c20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.820:187): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Verify/Stack.pm" dev=dm-0 ino=15615896 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.820:187): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.831:188): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Verify.pm" dev=dm-0 ino=15615854 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.831:188): arch=c000003e syscall=16 success=no exit=-13 a0=7 a1=5401 a2=7fffb12d5c20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.832:189): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/User.pm" dev=dm-0 ino=15615837 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.832:189): arch=c000003e syscall=16 success=no exit=-13 a0=8 a1=5401 a2=7fffb12d55a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.858:190): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/User/Setting.pm" dev=dm-0 ino=15615975 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.858:190): arch=c000003e syscall=16 success=no exit=-13 a0=9 a1=5401 a2=7fffb12d4f20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.861:191): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Product.pm" dev=dm-0 ino=15615153 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.861:191): arch=c000003e syscall=16 success=no exit=-13 a0=9 a1=5401 a2=7fffb12d4f20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.902:192): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Version.pm" dev=dm-0 ino=15615839 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.902:192): arch=c000003e syscall=16 success=no exit=-13 a0=a a1=5401 a2=7fffb12d48a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.917:193): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Object.pm" dev=dm-0 ino=15615152 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.917:193): arch=c000003e syscall=16 success=no exit=-13 a0=b a1=5401 a2=7fffb12d4220 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771054.966:194): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Install/Util.pm" dev=dm-0 ino=15615198 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771054.966:194): arch=c000003e syscall=16 success=no exit=-13 a0=b a1=5401 a2=7fffb12d4220 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.275:195): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Milestone.pm" dev=dm-0 ino=15615828 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.275:195): arch=c000003e syscall=16 success=no exit=-13 a0=a a1=5401 a2=7fffb12d48a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.327:196): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Group.pm" dev=dm-0 ino=15615823 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.327:196): arch=c000003e syscall=16 success=no exit=-13 a0=a a1=5401 a2=7fffb12d48a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.389:197): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Install/Requirements.pm" dev=dm-0 ino=15615178 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.389:197): arch=c000003e syscall=16 success=no exit=-13 a0=a a1=5401 a2=7fffb12d48a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.425:198): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Classification.pm" dev=dm-0 ino=15615814 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.425:198): arch=c000003e syscall=16 success=no exit=-13 a0=9 a1=5401 a2=7fffb12d4f20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.442:199): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Field.pm" dev=dm-0 ino=15615820 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.442:199): arch=c000003e syscall=16 success=no exit=-13 a0=9 a1=5401 a2=7fffb12d4f20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.470:200): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Persist/Cookie.pm" dev=dm-0 ino=15615887 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.470:200): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.490:201): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Token.pm" dev=dm-0 ino=15618052 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.490:201): arch=c000003e syscall=16 success=no exit=-13 a0=7 a1=5401 a2=7fffb12d5c20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771055.515:202): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Mailer.pm" dev=dm-0 ino=15616073 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771055.515:202): arch=c000003e syscall=16 success=no exit=-13 a0=8 a1=5401 a2=7fffb12d55a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.060:203): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/CGI.pm" dev=dm-0 ino=15615812 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.060:203): arch=c000003e syscall=16 success=no exit=-13 a0=5 a1=5401 a2=7fffb12d6920 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.183:204): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/DB.pm" dev=dm-0 ino=15615126 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.183:204): arch=c000003e syscall=16 success=no exit=-13 a0=5 a1=5401 a2=7fffb12d6920 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.343:205): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Install/Localconfig.pm" dev=dm-0 ino=15615296 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.343:205): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.406:206): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/DB/Schema.pm" dev=dm-0 ino=15618823 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.406:206): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.418:207): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Hook.pm" dev=dm-0 ino=15615824 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.418:207): arch=c000003e syscall=16 success=no exit=-13 a0=7 a1=5401 a2=7fffb12d5c20 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.688:208): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Template.pm" dev=dm-0 ino=15615144 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.688:208): arch=c000003e syscall=16 success=no exit=-13 a0=5 a1=5401 a2=7fffb12d6920 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.701:209): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Status.pm" dev=dm-0 ino=15615833 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.701:209): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771056.722:210): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Template/Parser.pm" dev=dm-0 ino=15615960 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771056.722:210): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.199:211): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Flag.pm" dev=dm-0 ino=15615497 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.199:211): arch=c000003e syscall=16 success=no exit=-13 a0=5 a1=5401 a2=7fffb12d6920 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.209:212): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/FlagType.pm" dev=dm-0 ino=15615822 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.209:212): arch=c000003e syscall=16 success=no exit=-13 a0=6 a1=5401 a2=7fffb12d62a0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.310:213): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/data/params" dev=dm-0 ino=15615233 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.310:213): arch=c000003e syscall=16 success=no exit=-13 a0=4 a1=5401 a2=7fffb12d6ae0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.319:214): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Update.pm" dev=dm-0 ino=15615137 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.319:214): arch=c000003e syscall=16 success=no exit=-13 a0=4 a1=5401 a2=7fffb12d6fa0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.337:215): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Login/CGI.pm" dev=dm-0 ino=15615860 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.337:215): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fffb12d75d0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.348:216): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Login/Cookie.pm" dev=dm-0 ino=15615862 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.348:216): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fffb12d75d0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.438:217): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/Auth/Verify/DB.pm" dev=dm-0 ino=15615893 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.438:217): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fffb12d75d0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.566:218): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/localconfig" dev=dm-0 ino=15615428 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.566:218): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fffb12d7110 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.582:219): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/DB/Mysql.pm" dev=dm-0 ino=15615186 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.582:219): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fffb12d75d0 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.600:220): avc: denied { ioctl } for pid=22799 comm="index.cgi" path="/home/bbaetz/public_html/bugzilla/Bugzilla/DB/Schema/Mysql.pm" dev=dm-0 ino=15615193 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771057.600:220): arch=c000003e syscall=16 success=no exit=-13 a0=4 a1=5401 a2=7fffb12d6f50 a3=ffffffff items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210771057.912:221): avc: denied { write } for pid=22799 comm="index.cgi" name="mysql.sock" dev=dm-0 ino=1866590 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:mysqld_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1210771057.912:221): arch=c000003e syscall=42 success=no exit=-13 a0=3 a1=7fffb12d71f0 a2=6e a3=7fffb12d65c0 items=0 ppid=13482 pid=22799 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=CRED_DISP msg=audit(1210771134.585:222): user pid=22515 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210771134.587:223): user pid=22515 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210771170.997:224): user pid=22930 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_ACCT msg=audit(1210771171.012:225): user pid=22930 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_START msg=audit(1210771171.024:226): user pid=22930 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=CRED_ACQ msg=audit(1210771171.024:227): user pid=22930 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AVC msg=audit(1210771222.970:228): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=7) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771222.558:229): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771222.558:229): arch=c000003e syscall=1 success=yes exit=3742127 a0=4 a1=7f89d1bbb010 a2=3919af a3=7fffda2f87f0 items=0 ppid=23018 pid=23027 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210771258.401:230): avc: denied { getattr } for pid=23058 comm="suexec" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771258.401:230): arch=c000003e syscall=6 success=no exit=-13 a0=7fffe4f07c37 a1=7fffe4f044b0 a2=7fffe4f044b0 a3=7fffe4f04200 items=0 ppid=13486 pid=23058 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AUTH msg=audit(1210771293.932:231): user pid=23129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_ACCT msg=audit(1210771293.958:232): user pid=23129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_START msg=audit(1210771294.002:233): user pid=23129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_ACQ msg=audit(1210771294.002:234): user pid=23129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_AUTH msg=audit(1210771306.564:235): user pid=23253 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_ACCT msg=audit(1210771306.573:236): user pid=23253 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=USER_START msg=audit(1210771306.586:237): user pid=23253 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=CRED_ACQ msg=audit(1210771306.586:238): user pid=23253 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/4 res=success)' >type=AVC msg=audit(1210771335.107:239): avc: denied { getattr } for pid=23342 comm="suexec" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771335.107:239): arch=c000003e syscall=6 success=no exit=-13 a0=7fff865e2c37 a1=7fff865deb90 a2=7fff865deb90 a3=7fff865de8e0 items=0 ppid=13481 pid=23342 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210771342.865:240): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=8) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771342.383:241): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771342.383:241): arch=c000003e syscall=1 success=yes exit=3742139 a0=4 a1=7f1f372e5010 a2=3919bb a3=7fff3fa24990 items=0 ppid=23340 pid=23347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210771400.157:242): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=9) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771399.751:243): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771399.751:243): arch=c000003e syscall=1 success=yes exit=3742139 a0=4 a1=7f855ce6b010 a2=3919bb a3=7fff655aacd0 items=0 ppid=23399 pid=23413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210771452.087:244): avc: denied { execute } for pid=23524 comm="suexec" name="foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771452.087:244): arch=c000003e syscall=59 success=no exit=-13 a0=7fff2d8d8c37 a1=7fff2d8d82f0 a2=7f3b25fac010 a3=7fff2d8d5bd0 items=0 ppid=13484 pid=23524 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210771489.162:245): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=10) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771488.751:246): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771488.751:246): arch=c000003e syscall=1 success=yes exit=3742139 a0=4 a1=7f9cb82bb010 a2=3919bb a3=7fffc09fb120 items=0 ppid=23547 pid=23556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210771493.006:247): avc: denied { read } for pid=23562 comm="suexec" name="foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771493.006:247): arch=c000003e syscall=59 success=no exit=-13 a0=7fff98490c37 a1=7fff9848eeb0 a2=7ffe907fa010 a3=7fff9848c790 items=0 ppid=13483 pid=23562 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210771519.590:248): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=11) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771519.133:249): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771519.133:249): arch=c000003e syscall=1 success=yes exit=3742139 a0=4 a1=7f1cd8db2010 a2=3919bb a3=7fffe14f1c20 items=0 ppid=23580 pid=23585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210771533.606:250): avc: denied { execute_no_trans } for pid=23595 comm="suexec" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771533.606:250): arch=c000003e syscall=59 success=no exit=-13 a0=7fffef566c37 a1=7fffef565f80 a2=7f89e8d78010 a3=7fffef563860 items=0 ppid=13485 pid=23595 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210771556.483:251): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=12) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771556.066:252): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771556.066:252): arch=c000003e syscall=1 success=yes exit=3742139 a0=4 a1=7f0bbf781010 a2=3919bb a3=7fffc7ebfce0 items=0 ppid=23613 pid=23618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1210771558.713:253): avc: denied { ioctl } for pid=23624 comm="foo.cgi" path="/home/bbaetz/public_html/foo.cgi" dev=dm-0 ino=7990381 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_user_content_t:s0 tclass=file >type=SYSCALL msg=audit(1210771558.713:253): arch=c000003e syscall=16 success=no exit=-13 a0=3 a1=5401 a2=7fff71369320 a3=ffffffff items=0 ppid=13487 pid=23624 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="foo.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=MAC_POLICY_LOAD msg=audit(1210771579.309:254): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771579.309:254): arch=c000003e syscall=1 success=yes exit=3742139 a0=4 a1=7f088df9d010 a2=3919bb a3=7fff966dc4c0 items=0 ppid=23638 pid=23643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210771579.803:255): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=13) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1210771617.321:256): avc: denied { write } for pid=23671 comm="index.cgi" name="mysql.sock" dev=dm-0 ino=1866590 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:mysqld_var_run_t:s0 tclass=sock_file >type=SYSCALL msg=audit(1210771617.321:256): arch=c000003e syscall=42 success=no exit=-13 a0=3 a1=7fff741d90f0 a2=6e a3=7fff741d84c0 items=0 ppid=13487 pid=23671 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=USER_AVC msg=audit(1210771840.338:257): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=14) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=MAC_POLICY_LOAD msg=audit(1210771839.906:258): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210771839.906:258): arch=c000003e syscall=1 success=yes exit=3742127 a0=4 a1=7f9ae1e62010 a2=3919af a3=7fffea59ff70 items=0 ppid=23942 pid=23951 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1210772061.227:259): user pid=23129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=USER_END msg=audit(1210772061.230:260): user pid=23129 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/3 res=success)' >type=CRED_DISP msg=audit(1210772095.797:261): user pid=22930 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_END msg=audit(1210772095.798:262): user pid=22930 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' >type=USER_AUTH msg=audit(1210773653.004:263): user pid=27377 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1210773653.008:264): user pid=27377 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1210773653.041:265): user pid=27377 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1210773653.041:266): user pid=27377 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_DISP msg=audit(1210773730.663:267): user pid=27377 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_END msg=audit(1210773730.665:268): user pid=27377 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_AUTH msg=audit(1210773733.547:269): user pid=27756 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_ACCT msg=audit(1210773733.550:270): user pid=27756 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=USER_START msg=audit(1210773733.564:271): user pid=27756 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=CRED_ACQ msg=audit(1210773733.565:272): user pid=27756 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/5 res=success)' >type=MAC_POLICY_LOAD msg=audit(1210773779.121:273): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210773779.121:273): arch=c000003e syscall=1 success=yes exit=3742163 a0=4 a1=7f259c5c5010 a2=3919d3 a3=7fffa4d03780 items=0 ppid=27858 pid=27865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210773779.557:274): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=15) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1210773828.968:275): avc: denied { connectto } for pid=27902 comm="index.cgi" path="/var/lib/mysql/mysql.sock" scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:system_r:mysqld_t:s0 tclass=unix_stream_socket >type=SYSCALL msg=audit(1210773828.968:275): arch=c000003e syscall=42 success=no exit=-13 a0=3 a1=7fffea1db130 a2=6e a3=7fffea1da500 items=0 ppid=13488 pid=27902 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=MAC_POLICY_LOAD msg=audit(1210773847.707:276): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210773847.707:276): arch=c000003e syscall=1 success=yes exit=3742175 a0=4 a1=7fb5cdc39010 a2=3919df a3=7fffd6376aa0 items=0 ppid=27916 pid=27921 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210773848.134:277): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=16) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)' >type=AVC msg=audit(1210773866.431:278): avc: denied { read } for pid=27939 comm="index.cgi" name="template" dev=dm-0 ino=15616343 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773866.431:278): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b580460 a1=90800 a2=7fff1b58046a a3=7fff1b580180 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210773866.431:279): avc: denied { read } for pid=27939 comm="index.cgi" name="extensions" dev=dm-0 ino=15616177 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773866.431:279): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b580460 a1=90800 a2=7fff1b58046e a3=1 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210773867.292:280): avc: denied { read } for pid=27939 comm="index.cgi" name="contrib" dev=dm-0 ino=15616249 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773867.292:280): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b580020 a1=90800 a2=7fff1b58002f a3=1 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210773867.337:281): avc: denied { read } for pid=27939 comm="index.cgi" name="extensions" dev=dm-0 ino=15616177 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773867.337:281): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b580020 a1=90800 a2=7fff1b58002e a3=1 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210773867.558:282): avc: denied { read } for pid=27939 comm="index.cgi" name="template" dev=dm-0 ino=15616343 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773867.558:282): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b57ffe0 a1=90800 a2=7fff1b57ffec a3=1 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210773867.688:283): avc: denied { read } for pid=27939 comm="index.cgi" name="extensions" dev=dm-0 ino=15616177 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773867.688:283): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b580020 a1=90800 a2=7fff1b58002e a3=1 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=AVC msg=audit(1210773867.718:284): avc: denied { read } for pid=27939 comm="index.cgi" name="extensions" dev=dm-0 ino=15616177 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=system_u:object_r:httpd_user_content_t:s0 tclass=dir >type=SYSCALL msg=audit(1210773867.718:284): arch=c000003e syscall=2 success=no exit=-13 a0=7fff1b580020 a1=90800 a2=7fff1b58002e a3=1 items=0 ppid=13487 pid=27939 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4 comm="index.cgi" exe="/usr/bin/perl" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null) >type=MAC_POLICY_LOAD msg=audit(1210773898.517:285): policy loaded auid=500 ses=5 >type=SYSCALL msg=audit(1210773898.517:285): arch=c000003e syscall=1 success=yes exit=3742175 a0=4 a1=7f1ac9b56010 a2=3919df a3=7fffd22939c0 items=0 ppid=27962 pid=27967 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=5 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1210773898.945:286): user pid=2173 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=17) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=305364">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 446380
: 305364