Attachment 305527 Details for Bug 446428 – audit file

audit file

audit.log (text/plain), 26.48 KB, created by Luya Tshimbalanga on 2008-05-15 19:36:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Luya Tshimbalanga

Created: 2008-05-15 19:36:48 UTC

Size: 26.48 KB

patch

obsolete

>type=DAEMON_START msg=audit(1210837262.120:1775): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.x86_64 auid=4294967295 pid=1892 res=success
>type=CONFIG_CHANGE msg=audit(1210837262.249:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USYS_CONFIG msg=audit(1210837531.499:5): user pid=2438 uid=0 auid=4294967295 subj=system_u:system_r:firstboot_t:s0 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AUTH msg=audit(1210837580.509:6): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210837580.517:7): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210837580.547:8): user pid=2598 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210837580.616:9): login pid=2598 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210837580.727:10): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210837581.324:11): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210837581.327:12): user pid=2598 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210838257.621:13): user pid=3589 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210838257.626:14): user pid=3589 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210838282.364:15): user pid=3617 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210838282.371:16): user pid=3617 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210838359.267:17): user pid=3639 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210838359.273:18): user pid=3639 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210838380.379:19): user pid=3661 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210838380.386:20): user pid=3661 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210838403.775:21): user pid=3709 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1210838403.780:22): user pid=3709 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1210838403.820:23): user pid=3709 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210838403.821:24): user pid=3709 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1210838461.854:25): user pid=3754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210838461.857:26): user pid=3754 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210838461.859:27): login pid=3754 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210838461.864:28): user pid=3754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210838461.962:29): user pid=3754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210838461.962:30): user pid=3754 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AUTH msg=audit(1210838577.676:31): user pid=3773 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210838577.683:32): user pid=3773 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1210838746.092:33): user pid=3823 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210838746.098:34): user pid=3823 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-grant-helper-pam" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1210838885.462:35): user pid=3709 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1210838885.465:36): user pid=3709 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=DAEMON_END msg=audit(1210838887.847:1776): auditd normal halt, sending auid=0 pid=4289 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210838949.849:491): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.x86_64 auid=4294967295 pid=1925 res=success
>type=CONFIG_CHANGE msg=audit(1210838949.969:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210839078.141:5): user pid=2562 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210839078.149:6): user pid=2562 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210839078.167:7): user pid=2562 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210839078.252:8): login pid=2562 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210839078.385:9): user pid=2562 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210839079.154:10): user pid=2562 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210839079.186:11): user pid=2562 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210839118.933:12): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1210839118.940:13): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1210839119.006:14): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210839119.007:15): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_DISP msg=audit(1210839139.709:16): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1210839139.712:17): user pid=3039 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=DAEMON_END msg=audit(1210839141.927:492): auditd normal halt, sending auid=0 pid=3294 subj=system_u:system_r:initrc_t:s0 res=success
>type=DAEMON_START msg=audit(1210877528.266:1364): auditd start, ver=1.7.2 format=raw kernel=2.6.25-14.fc9.x86_64 auid=4294967295 pid=1879 res=success
>type=CONFIG_CHANGE msg=audit(1210877528.380:4): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=USER_AUTH msg=audit(1210877556.680:5): user pid=2519 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1210877556.687:6): user pid=2519 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1210877556.712:7): user pid=2519 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1210877556.785:8): login pid=2519 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1
>type=USER_ROLE_CHANGE msg=audit(1210877556.858:9): user pid=2519 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210877557.530:10): user pid=2519 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="luya" exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1210877557.573:11): user pid=2519 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" (hostname=, addr=?, terminal=/dev/tty7 res=success)'
>type=USER_AUTH msg=audit(1210877621.800:12): user pid=2976 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1210877621.806:13): user pid=2976 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1210877621.866:14): user pid=2976 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210877621.867:15): user pid=2976 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1210877672.022:16): user pid=3023 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210877672.022:17): user pid=3023 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210877672.039:18): user pid=3023 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1210877767.215:19): avc:  denied  { read } for  pid=2194 comm="NetworkManager" name="dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210877767.215:19): arch=c000003e syscall=2 success=no exit=-13 a0=e2f4b0 a1=0 a2=0 a3=7f4c1900da70 items=0 ppid=1 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1210877767.227:20): avc:  denied  { read } for  pid=3133 comm="dhclient" name="dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:dhcpc_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210877767.227:20): arch=c000003e syscall=2 success=no exit=-13 a0=7fff60764e9d a1=0 a2=1b6 a3=7fcc5874f6f0 items=0 ppid=1 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1210877767.227:21): avc:  denied  { write } for  pid=3133 comm="dhclient" name="dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:dhcpc_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210877767.227:21): arch=c000003e syscall=2 success=no exit=-13 a0=7fff60764e9d a1=241 a2=1a4 a3=7fcc5874f6f0 items=0 ppid=1 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1210877767.256:22): avc:  denied  { write } for  pid=3133 comm="dhclient" name="dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:dhcpc_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210877767.256:22): arch=c000003e syscall=2 success=no exit=-13 a0=7fff60764e9d a1=241 a2=1a4 a3=9e3a70 items=0 ppid=1 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1210877812.216:23): avc:  denied  { unlink } for  pid=2194 comm="NetworkManager" name="dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210877812.216:23): arch=c000003e syscall=87 success=no exit=-13 a0=e2f860 a1=7f4c18dde8f0 a2=7f4c1900da60 a3=7f4c1900da70 items=0 ppid=1 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>type=USER_ACCT msg=audit(1210878061.406:24): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_ACQ msg=audit(1210878061.409:25): user pid=3219 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=LOGIN msg=audit(1210878061.409:26): login pid=3219 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1210878061.416:27): user pid=3219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=CRED_DISP msg=audit(1210878061.538:28): user pid=3219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_END msg=audit(1210878061.538:29): user pid=3219 uid=0 auid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>type=USER_AVC msg=audit(1210878306.291:30): user pid=1989 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=MAC_POLICY_LOAD msg=audit(1210878305.621:31): policy loaded auid=500 ses=1
>type=SYSCALL msg=audit(1210878305.621:31): arch=c000003e syscall=1 success=yes exit=3819263 a0=4 a1=7fcde2f02010 a2=3a46ff a3=7fffeb662d90 items=0 ppid=3272 pid=3273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1210878319.925:32): avc:  denied  { getattr } for  pid=2194 comm="NetworkManager" path="/var/run/dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210878319.925:32): arch=c000003e syscall=5 success=no exit=-13 a0=b a1=7fff21fcf080 a2=7fff21fcf080 a3=7f4c1900da70 items=0 ppid=1 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>type=AVC msg=audit(1210878319.954:33): avc:  denied  { getattr } for  pid=3277 comm="dhclient" path="/var/run/dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:dhcpc_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210878319.954:33): arch=c000003e syscall=5 success=no exit=-13 a0=4 a1=7fffb5fed2d0 a2=7fffb5fed2d0 a3=7f7aadfd76f0 items=0 ppid=3276 pid=3277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1210878319.955:34): avc:  denied  { getattr } for  pid=3277 comm="dhclient" path="/var/run/dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:dhcpc_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210878319.955:34): arch=c000003e syscall=5 success=no exit=-13 a0=4 a1=7fffb5fed760 a2=7fffb5fed760 a3=7f7aadfd76f0 items=0 ppid=3276 pid=3277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1210878320.047:35): avc:  denied  { getattr } for  pid=3277 comm="dhclient" path="/var/run/dhclient-eth0.pid" dev=dm-0 ino=1286892 scontext=system_u:system_r:dhcpc_t:s0 tcontext=unconfined_u:object_r:var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1210878320.047:35): arch=c000003e syscall=5 success=no exit=-13 a0=7 a1=7fffb5fed760 a2=7fffb5fed760 a3=7f7aadfd76f0 items=0 ppid=1 pid=3277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=USER_AUTH msg=audit(1210878559.612:36): user pid=3293 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1210878571.854:37): user pid=3297 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210878571.856:38): user pid=3297 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210878571.871:39): user pid=3297 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1210878665.371:40): user pid=2976 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_END msg=audit(1210878665.375:41): user pid=2976 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1210878722.218:42): user pid=4179 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1210878722.219:43): user pid=4179 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1210878722.235:44): user pid=4179 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1210878758.132:45): user pid=4179 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1210878767.105:46): avc:  denied  { read } for  pid=4650 comm="consoletype" path="/var/lib/dhclient/dhclient-eth0.leases" dev=dm-0 ino=1286893 scontext=unconfined_u:system_r:consoletype_t:s0 tcontext=unconfined_u:object_r:dhcpc_state_t:s0 tclass=file
>type=SYSCALL msg=audit(1210878767.105:46): arch=c000003e syscall=59 success=yes exit=0 a0=cf3c40 a1=cf3ca0 a2=cf37e0 a3=7fffc777d920 items=0 ppid=4649 pid=4650 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:system_r:consoletype_t:s0 key=(null)
>type=AVC msg=audit(1210878767.271:47): avc:  denied  { read } for  pid=4678 comm="ifconfig" path="/var/lib/dhclient/dhclient-eth0.leases" dev=dm-0 ino=1286893 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:dhcpc_state_t:s0 tclass=file
>type=SYSCALL msg=audit(1210878767.271:47): arch=c000003e syscall=59 success=yes exit=0 a0=d66620 a1=d666c0 a2=d5fc80 a3=7fffc777e430 items=0 ppid=4648 pid=4678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="ifconfig" exe="/sbin/ifconfig" subj=unconfined_u:system_r:ifconfig_t:s0 key=(null)
>type=USER_AUTH msg=audit(1210878862.186:48): user pid=4773 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1210878862.192:49): user pid=4773 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1210878862.215:50): user pid=4773 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1210878862.217:51): user pid=4773 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'

Actions: View

Attachments on bug 446428: 305412 | 305527 | 305746 | 332745